How stale refresh tokens quietly keep attackers (and bugs) logged in — and what to do about it

🙋‍♂️ About Me

Hey there!😁

Yes — your first real bug is closer than you think. Not some textbook nonsense, not a contrived lab — a bug on a live program that was…

Learn how inconsistent cache key handling across layers can expose modern web applications to hidden injection risks.

I highly recommend that you read my previous Spark AR write up, while the two bugs are not related, the other post contains more…

Ahoy y’all;

Recover scammed USDT by Mighty Hacker Recovery

Did you hear that one of the DNA-checking ancestry websites was recently hacked, twice, and they think it might have been by the same…

Hack The Box Writeup: Whisper

Your online security depends on more than just a password. Imagine if a simple code wasn’t enough to protect your personal data or business…

A perspective flip that made everything finally make sense

Today’s Top Cyber Intelligence Highlights — Nov 05, 2025 ```html Good evening, cyber citizens! Tonight’s forecast: a mixed bag of digital mayhem, from ransomware indictments to sneaky …

Around 2021, coding bootcamps were everywhere. I was one of the people hooked by the idea of learning fast and landing a job. At that time…

From Technical Hacker to Strategic Thinker: The Lesson That Transformed My Career

Disclamer : “Tulisan ini saya susun khusus nya sebagai catatan pribadi dalam proses pembelajaran saya. Namun, tulisan ini tersedia untuk…

Common LoL Tools and Techniques

When working as a SOC analyst, you will come across content (a file or traffic) that seems suspicious. But is it?

kali ini kita akan melanjutka progres belajar boot to root lagi, disini kita akan mengerjakan soal Funbox: Under Construction! yang ada di…

kali ini kita akan melanjutkan pengerjaan soal boot to root lagi, kali ini challenge nya akan cukup mudah karena terdapat kerentanan yang…