1.1 The Security Question

During a web application security assessment, I was testing a team management system with different roles and permission levels.

Read-only IDORs get upvotes. Write-capable IDORs get accounts.

How one LinkedIn message led to hands-on application testing, and the honest feedback that changed how I work.

🚨 The Human Side of Cybersecurity: Why People Can Become the Target

It starts with a routine restart. A container goes down for a few seconds, then comes back and the dashboard looks healthy. Published…

In web application security, some vulnerabilities don’t require complicated payloads or sophisticated exploitation techniques. Sometimes, a…

Origin reflection, null tricks, regex bypasses, and the misconfigurations that turn CORS into account takeover.

Introduction

I spent time exploring AI coding tools, but the biggest improvement in my workflow came when I stopped collecting tools and started testing…