JWT Authentication Bypass via Algorithm Confusion

Most companies focus on protecting their main APIs. But attackers know that the real gold often hides in places security teams forget: old…

Welcome to this new Medium post. Today, we’re going to explore a creative way for processes to share data: using ghost files.

The OWASP top ten

Explored a DOM-based XSS vulnerability triggered by jQuery, to understand how client-side injection works.

In DevSecOps, we aim to shift security left: embedding checks directly into development workflows. But when AI models enter the picture…

1. The Facade

Ever opened an email and felt like something was off — like someone was silently watching? You might not be wrong. Email tracking pixels…

In This blog I will be diving into how I completed my SQL Injection as well as providing the start-up on the lab.

🚀 Introduction: Meet Your New Coworker — It’s a Bot With an Agenda

Use your Linux forensics knowledge to investigate an incident.

The Blueprint machine on TryHackMe simulates a vulnerable environment where we exploit a flaw in the osCommerce system to gain Remote Code…

.بسم الله الرحمن الرحيم, اللهم صلي وسلم وزد وبارك على سيدنا محمد وعلى آله وصحبه وسلم

In today’s hybrid and remote-first world, the humble workstation is undergoing a massive transformation. The physical laptop or desktop is…

Colleagues, are you seeking to land the next job in your Cybersecurity career journey … either within your current company or with a new…

When news broke that Marks & Spencer had fallen victim to a ransomware breach linked to DragonForce and the Scattered Spider group, it set…

In the world of cybersecurity, the importance of encryption cannot be overstated. As we continue to witness an ever-growing need to secure…

Discover how to automate subdomain discovery with reliable tools and workflows for large-scale recon