Akwaaba! The application processed user request data in a weird way. All requests were made with the GET method but no parameters. The…

Step by step guide discovering persistent XSS via input field

Some bugs might take very long to find, but others reveal themselves quickly, if you know where to look.

Coding is an indivisible part of hacking — and yet most people ignore it. Tools are everywhere, but the tools you use are made of code. If…

LSB steganography hides secrets in images by tweaking tiny bits — like whispering a secret so softly it can’t be heard, but it’s still there

The 2026 Robotti AppSec Report: AI risks, supply chain attacks, and secure-by-design strategies shaping cybersecurity’s future.

The cyber world.

This warmup machine focuses on teaching how to perform directory scanning on Apache and SSH services, brute-force attacks and how to chain…

Volkswagen Group is the second-largest car manufacturer in the world in sales, the largest in the world in revenue, and the largest company…

Let this be a reusable cheat sheet for Windows / IIS / MSSQL / Active Directory engagements. Replace placeholders like <IP>, <HOST>…

What’s the most terrifying disease you’ve ever heard of?

Microgrids and Distributed Energy Resources (DERs) sound green and futuristic, right? But beneath that promise lies a new battleground in…

UTA0388 has quietly raised the bar for cyber espionage by mixing old school tricks with new school automation. What began as targeted spear…

Most sysadmins know to restrict sudo access, but few realize that Linux capabilities are often the hidden backdoor to root-level power…

Introduction
Hey there, internet warrior! 👋 If you think hackers are dark-hooded geniuses typing 10,000 lines of code a second to break…

I’ve been building a daily habit of exploring cybersecurity concepts — small, consistent learnings that help me grow as a security analyst…