Why I'm Writing This

Hi, My name is Abdelkader Mouaz and also know as Hamzadzworm

Yesterday, we talked about what Swagger UI is — that clean little interface that shows all the API endpoints and lets you hit “Try it out”…

In the world of bug bounty, we often get distracted by complex blind SSRFs or intricate race conditions. However, sometimes the most…

This roadmap is for students, beginners, and self-learners who want to enter cybersecurity without confusion and build real skills, not…

IDOR Vulnerability in Dictionary Endpoint — Arbitrary Deletion of User Items (€€€) Author: Hasan_Khan0x Reward: €€€ Program: Responsible Disclosure Bug Bounty Checklist Used …

While looking at the TLS 1.3 session ticket handling in wolfSSL, I found a small boundary issue inside SetTicket() in src/internal.c. At first glance, it looks harmless. Just some pointer math and a length check. But the details matter. The code builds a…

CTF solve report: Stored XSS by chaining unsanitized markdown rendering, preview script re-injection, and JSONP callback reflection

Most payment bugs people look for are obvious: changing a price, reusing a discount, forcing a negative total, or finding a race condition.

Short Description: An attacker can take over any account ([email protected]) solely under the condition that the victim has NOT yet…