How to Identify, Exploit, and Secure S3 Bucket Misconfigurations

How a GraphQL Mutation Allowed Unauthorized Report Deletion Across Teams

A Fun and Educational Deep Dive into Windows Security Weaknesses

JWT Authentication Bypass via Unverified and Flawed Signature Verification

Artificial Intelligence (AI) has transformed how we interact with technology. From answering complex questions to assisting with creative…

Hidden tokens, endpoints led to large compromise

Hey there!😁

Free Article Link

Peace be upon you readers, as you are reading my another write up, hoping you are fine and doing well. In this write up, I will demonstrate…

Software testing is all about making sure a product works well and meets user needs. Whether you’re new to testing or a pro, these seven…

Every time you visit a website, your browser sends a request to the server like this:

Sometimes, it’s not about brute force. It’s about finesse. One header. One oversight. One open door.  — A Hacker’s Mindset 🧠

In today’s digital-first economy, location is no longer a limitation — it’s an opportunity. As organisations increasingly embrace remote…

First accepted bug

Attacking and Defending AWS → Attacking and Defending Serverless → Lambda - Data Exfiltration → 2 of 3. Try your hand and compromising…

You saw the headline and felt your stomach drop.

Let’s be real OSINT isn’t about throwing a thousand tools at a target and hoping something sticks. It’s about precision, context, and…

In October 2024, U.S. regulators fined TD bank¹ around 3 billion dollars² for running a very bad anti-money laundering (AML) program over…

A few nights ago, while exploring new AI tools, I came across Venice.ai. It looked simple at first, but what stood out was how it worked…

Protect Your Devices the Smart Way in 2025…..