Introduction

While testing the account features of an e-commerce platform, I came across a CSRF vulnerability that allowed unauthorized addition of…

But not all voting systems are implemented securely. In this article, I will walk you through a real-world vulnerability that still exists…

Hey there!😁

From a Simple XSS to Full Account Takeover — Here’s How It Happened

بسم الله و الحمدلله و الصلاة و السلام على رسول الله

FRANCIS MWANGI | SOFTWARE ENGINEER | LINKEDIN

Bazı insanlar için bir sistemin arayüzü, sadece kullanılması gereken bir araçtır. Ama bir hacker için o ekran; fırsatların, eksikliklerin…

Must-have tools for OSINT investigators

✋ Ever seen this?

An explanatory walkthrough of Authentication Bypass in PortSwigger

16 billion login credentials from major services like Apple, Google, Facebook, GitHub, Telegram — even government portals — were…

This format is practical, relatable, and highly shareable — perfect for high claps and wide reach on Medium. Let’s face it — India is going digital faster than ever. From UPI payments to Instagram…

Great choice! The title “Got Hacked — Here's Everything I Learned About Cybersecurity the Hard Way” is emotionally engaging and click-worthy, especially on Medium. Here's a full article draft you can…

Keamanan Digital Bukan Cuma Soal Firewall

This is a guest post originally published on Technijian’s cybersecurity blog. For an in-depth discussion of this breach, listen to our…

My name is Bright — many of you already know me. Lately, I’ve been reflecting deeply on how to refine and expand my skill set to better position myself for opportunities in the global tech market…

In this TryHackMe room, we’ll examine Bolt CMS, a lightweight PHP-based content management system. Through exploiting a Remote Code…

A historic password spill just dropped: 16 billion username-and-password pairs pulled from infostealer malware and left in open cloud…

Vulnerability Details Title: Insecure Direct Object Reference (IDOR) in Zendesk Chat Messages
Target URL…