Node.js applications are not immune to injection attacks. In fact, SQL injection and NoSQL injection (e.g. MongoDB) remain top threats when…

I was just browsing the internet for something and i found this website after navigating this website i found that the technologies used in…

1. Special Character Injection: When we provide special characters such as ', ", /, \, } etc., in the URL parameter, it can cause an SQL query to break and return an error message. These error…

Hello guys, I am Adithya M S, a guy passionate about exploring hidden endpoints in web services and trying to dig deep into them. This is…

Crafting Our Payloads:

## Intro

Over the past few months, I discovered a recurring security loophole across multiple top-tier platforms, including Google, Samsung, Adobe…

It was one of those late nights, just me and the screen. Outta pure boredom, I was digging through VirusTotal — not looking for anything…

Open redirect zəifliyi OWASP Top 10 siyahısında da yer alan geniş yayılmış bir zəiflikdir.Bu zəiflik URL-dəki parametr vasitəsilə…

Discovered 3

👋 Hello hunter!
 I’m “Clipp3r”, a passionate cybersecurity researcher with a special focus on deep-diving into the wild web ocean 🌊. I…

While testing the “forgot password” feature on a target website, I discovered a way to bypass the CAPTCHA step by modifying a JSON response…

JWT Authentication Bypass via Algorithm Confusion Exploit Without Key Disclosure

”I wasn’t planning to break anything. I just wanted free stuff.” – A bored bug hunter, probably me

🧠 The Curiosity That Sparked It

Reconnaissance is the foundation of every solid red team engagement, bug bounty hunt, or OSINT investigation.

Last Chance to Claim Recon Solana $RECON Tokens

Find vulnerabilities on your bug bounty target easily

📌 TL;DR

In the heart of Bucharest, I often find myself staring at lines of code late into the night, hunting for that elusive vulnerability that…

A useful tool for bug bounty hunters