Recon didn’t show it. My scanner didn’t see it. Even my browser’s DevTools stayed quiet.

Summary:

Hey hackers 👋 — this post is a fun deep dive into a critical authentication vulnerability I discovered during a recent security test. It combines one of my favorite web bugs (race condition) with a…

Hey hackers 👋 — this post is a fun deep dive into a critical authentication vulnerability I discovered during a recent security test. It combines one of my favorite web bugs (race condition) with a…

Hey folks!
 In this write-up, I’ll walk you through how I earned a $150 bounty for discovering a Broken Access Control vulnerability using…

Fifteen years ago, I was just a teenager screwing around with websites.
My friends and I used to hang out, poke into sites we didn’t own…

Introduction: The Opportunity of a Lifetime

Tips for becoming a report conoisseur

CTFs aren’t just puzzles — they’re secret ground to practice!

Why Apple is paying more — and handing out iPhones — to force a change in how security research works.

Think of a smart contract like a digital vending machine:

Introduction: The Rise of the Faceless Hacker

After earning some reputation points from public programs on HackerOne, I was excited when I received my first invitation from — let’s…

Here’s my honest take after almost 2 years of hacking

Introduction

Nothing Just another day another target story

Yo whats up peeps, its MRKNIGHT-NIDU here! Today Im spilling the tea on how I nabbed this high sev find on a subdomain of amsterdam.nl, got…

I was hunting a target, reported a few vulnerabilities, and will continue with my hunting.