So this happened back on 14th September 2024. I was just testing the website, casually checking out their social media links twitter…

Because piping commands together is not the answer.

Hi, I’m Uday — a bug bounty hunter who loves blending recon, automation, and curiosity to hunt down vulnerabilities. In this write-up…

Authentication flaw

By Manz J — Still learning, sharing what’s working for me

While testing a popular app, I stumbled on an endpoint that seemed harmless — until it leaked EVERY user’s data.

Cybercriminals are using AI to launch faster, smarter, more scalable attacks. And defenders? They’re using AI to fight back.

👉 What’s happening in cybersecurity today?

Task 1:

– Social engineering attack duped Gemini user into sharing private keys
– ZachXBT’s blockchain investigation led to arrest of all three…

This month, I had the incredible opportunity to deliver my first international presentation in English during a webinar hosted by…

At the end of 2021, I joined a young fintech startup with a brilliant idea: build a lending as a service platform. The concept was fresh…

TL;DR: Waspada saat expose port, jangan lupa aktifkan firewall

Trying to get into Cybersecurity with my friends, and with help of an experienced mentor. So far so good, got my first certificate from…

Artificial Intelligence (AI) has rapidly evolved from a futuristic concept into an omnipresent force shaping every corner of our digital…

Introduction to GRC Tools in 2025

[Task 1] Deploy the machine

LinkedIn has become the premier platform for job seekers, professionals, and recruiters worldwide. However, with its popularity has come an…

For this time I would like to tell a walkthrough about CSRF Session Security. I got this lab sample from hack the box academy.

The Shocker machine on Hack The Box demonstrates exploiting the Shellshock vulnerability in the Apache CGI interface, allowing remote code…

Introduction