Assalam o alaikum for muslim brothers and hello for non muslims, i hope all of you are doing well and learning new things day by day.

When we think of vulnerabilities, we often imagine fancy stuff — SQL injections, RCEs, or critical auth bypasses. But sometimes, the most…

unauthorized authentication to enterprise infrastructure that used by Oppo alibaba$$.. Hello Hackers — hope you’re well. Today I’m sharing a short write‑up about a recent finding on a …

The Mindset: Understanding the Problem Before Smashing the Keyboard

Hello, today we continue our CPTS-OSCP series with a machine called Manager. This Hack The Box machine is labelled as Me and uses the…

pwncollege Talking Web full writeup

While researching how file upload features can lead to widespread security issues, I came across a fascinating first-time bug bounty report…

Writeup of the “Ignite” machine of tryhackme

The target leveraged a chain of issues — log pollution and misconfigured Apache settings — to enable lateral movement. Through methodical…

In today’s digital landscape, losing data isn’t a matter of if, it’s a matter of when. Hardware fails. Cloud accounts get compromised. And…

Learn how HTTP headers shape proxy communication, influence anonymity, and impact performance in scraping and automation.

💥 Boss of The SOC (BOTS) Writeup Mega Series Begins!

Le 25 octobre 2025, j’ai eu l’honneur d’être invité par la CRTV au Journal Officiel de 20h pour aborder un sujet brûlant : l’usage abusif…

Across industries, especially in highly-regulated industries such as financial services and energy, everyday IT tickets can reveal how…

A certification review

Introduction

Introduction

Some bugs don’t require a tool like Burpsuite or even recon simply exploring the application and its features can lead to easy bounty wins