Hi everyone! My name is Anatoliy, and this is my first article for Medium. Today, I’d like to introduce a tool I’ve developed for security…

Bitcoin Scams are becoming more sophisticated, and many people fall victim to them. This can be very upsetting, but don’t feel ashamed if…

SAST Series: Part 3

Vulnerability CVE-2025–32463

Hey there!😁

Google just released a security update for zero-day vulnerability in its Google Chrome browser which is tracked as CVE-2025-6554.

Hey there!😁

I wasn’t chasing a bounty this time.
 This time, the thrill was different — I wanted to earn a Letter of Appreciation from LG.

Sometimes, all it takes is a little curiosity, some HTTP trickery, and an overlooked misconfiguration to move from being locked out to…

Exploiting a Safe-looking API Response to Trigger Full XSS in Self-Hosted GitLab Instances Lacking CSP

Hey there!😁

“Your SIM card is not just a number — it’s your identity, your wallet, your access pass to everything digital. Lose it, and lose…

Spot slow payouts, low rewards, and duplicate traps — use these 5 red flags to find bug bounty programs that truly value your skills.

I used to chase the big ones. XSS, SSRF, RCE

Build your own Distributed Commands Execution System

Let’s be honest: we all dream of the big RCE. But while you’re chasing that unicorn, there’s a steady stream of smaller, often overlooked…

How I Found 300+ Critical Vulnerabilities in a Moroccan ISP and Cloud provider — And Got Ignored

Introduction

👋 Introduction