MIST

26th July 2025 | Saturday | Contributor: Dhruv Kaushik

I applied to over 20 cybersecurity placements. I tailored my CV. I rewrote cover letters. Most rejected me. Some ghosted me completely.

Cyber Incident Response via Volatile Memory

How typosquatting, process hollowing, and anti-forensics techniques create the perfect storm for evasion.

CVE-2025–6977-POC — Reflected XSS in ProfileGrid WordPress Plugin (Unauthenticated)

Photo by Nguyen Dang Hoang Nhu on Unsplash

Pentesting is not just technical. It is emotional.

A simple logic flaw in Pixiv’s password reset flow enabled unrestricted verification code brute-forcing — earning a $1000 bounty

When I first got into bug bounty hunting, I used to think finding big bugs required fancy payloads and hardcore exploitation skills. But…

A simple plugin path traversal exposed sensitive server files on a public dashboard

🚀 Introduction: Why You Need Your Own Hacking Lab

I found a bug — but it was marked as duplicate. Here’s how I did it.

Scan for secrets using regex+entropy with LLM

In today’s fast-paced development world, security engineers face constant pressure to keep up with rapid releases, shifting priorities, and…

My Background

Introduction  On 26 July 2025 Allianz Life Insurance Company of North America revealed that hackers had stolen personal data on most of…

Learn how YouTube channels are being hacked, see real examples from 2025, and implement proven protection & recovery strategies.

🐟 It Started with a Joke… and Ended in Disaster

🧊 It Started With a Chill…

Recently I had a really great time investigating this Digital Forensics and Incident Response Challenge by CyberDefenders. It lasted about…