A structured penetration testing report on the Athena TryHackMe room, demonstrating methodology, tools, and findings.

Exposing Stored XSS: Decoding the SMTP Error Message Exploit on XVIDEOS

Hey security enthusiasts! 👋  I’m Yamini Yadav, your Security Engineer and OSCP-certified guide through the ever-evolving maze of web…

CyberTalents — Strength Calculator write-up: A hard web challenge where I exploited a Jinja2 SSTI vulnerability to safely retrieve the…

TL;DR

Have you ever tried running commands like ls, pwd, etc. using editors like vim, vi, or even tools like awk? Well, you actually can — and…

I found sqli and html injection in IITKGP’s domain.

I have been doing a lot of labs and reading resources to understand more about XSS and techniques that come with it. Recently I came…

Aim:

Scope: CDN/API gateway/reverse proxy/ingress/service-mesh layers (Cloudflare, Akamai, Fastly, CloudFront/ALB/APIGW, Azure Front Door…

TL;DR Walkthrough of the VulnNet: Active TryHackMe room.

What is the first flag you receive after successfully detecting sample1.exe?

by Ayush

While testing an API endpoint with a colleague, a single quote accidentally slipped into a parameter — and the server responded…

Hello! I’m new to bug bounty hunting and security research, and this post is about my experience in finding and reporting my first serious security vulnerability for a site listed on…

When we think of OAuth, most imagine it as a secure, battle-tested protocol that giants like Google, Facebook, and Twitter rely on for…

Rate limits are supposed to stop abuse. They make sure you can’t spam actions like login attempts, password resets, or email verification…

In today’s digital world, running an online business means more than just delivering great products or services, it also means defending…

Become a Part of a New Publication, that brings together Ethical Hackers, Bug Bounty Hunters, IT Specialist, and Much More!

Google awarded a groundbreaking $250,000 bounty to security researcher Micky for identifying a critical remote code execution flaw in…

Injection attacks have haunted web applications for decades. From classic SQL Injections (SQLi) to modern-day Server-Side Template…