Modern cities run on infrastructure that we do not even think about most of the time. Electricity, water supply, oil pipelines, gas…

The real security mindset nobody tells you about

Introduction

A responsible researcher’s view on evaluating Android root detection includes its strengths and weaknesses. It also discusses how…

SDG:4 (Education)

IoT devices are EVERYWHERE — from smart fridges and coffee machines to digital locks and security cameras. But did you know each device…

You’re confident your IT team has everything under control: the firewalls are up, antivirus is active, and alerts are being monitored.

Imagine guarding the world’s most famous art collection , da Vinci’s Mona Lisa, ancient sculptures, royal crowns , and locking it all up…

Hello everyone! My name is Arfat Khan, and I run a YouTube channel called Arfi Tutorials. I am a bug bounty hunter, penetration tester, and…

This write-up covers the Assessment Methodologies: Footprinting and Scanning CTF 1 lab from the INE Penetration Testing Student course…

Not in the docs, not in tutorials, but insanely powerful

The overlooked truth behind modern authentication, and why your login system might be a ticking time bomb disguised as a feature.

Lab: SQL injection attack, querying the database type and version on Oracle

Lab: Blind SQL injection with conditional responses

Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

The Ultimate Bug Bounty Roadmap

Happy Friday, friends and.. others.

We’re glad/sorry to hear that your week has been good/bad, and it’s the weekend/but at least it’s almost the weekend!


What’re We Doing Today, Mr Fox?

Today, in a tale that seems all too familar at this point,

Lab: Exploiting server-side parameter pollution in a query string

You’ve heard of ninjas, haven’t you? Silent but deadly they lurk in the shadows, waiting for the right moment to strike you in the back.