A modern, bilingual, glassmorphic Single Page Application designed for Pentesters, Security Researchers, and Developers.

A beginner-friendly, practical walkthrough of how NoSQL injection works, why it’s often overlooked, and how to actually test for it.

In Part 1 of this series, we examined 12 web security vulnerabilities and weaknesses involving JWTs, Java configuration, TLS, HTTP request…

Bug bounty hunting often involves repeating the same reconnaissance tasks across different targets: discovering subdomains, checking open…

JWTs (Json Web Tokens) is basically a digital token that allows a server to identify an authenticated user without asking for the username…

Testing a Banking API Against the OWASP API Security Top 10

A plain-language tour of the ten ways your app most likely gets owned — and the small code changes that stop them.

A web or mobile application can look secure on the surface and still contain weaknesses that an attacker could exploit. Modern applications…

PART 2 — WHEN THE LOGIN API REVEALS TOO MUCH. Excessive Data Exposure and Rate-Limiting Weaknesses in VulnBank’s Authentication Endpoint

Use this repository as a reference guide throughout your software development life cycle, whether you are releasing a new build, applying a…