The danger already in the room
 I keep thinking about the people already inside the office, the ones who know the Wi‑Fi password by heart…

The cybersecurity landscape is undergoing a seismic shift. Gone are the days when standard antivirus software and a basic firewall could…

นักช้อปต้องระวังวัน Prime Day หลังพบโดเมนปลอมกว่า 1,000 รายการเลียนแบบ Amazon

Pernahkah kamu membagikan foto secara daring tanpa menyadari bahwa ada informasi lokasi yang tersembunyi di dalamnya?

In today’s fast-moving business world, technology plays a central role in daily operations. Whether you’re managing a startup, growing a…

Cross-Site Scripting (XSS) is one of the most common — and dangerous — web application vulnerabilities. It allows attackers to inject…

AI has gone mainstream — but not just for productivity. Criminals are now using AI chatbots like WormGPT and FraudGPT to write phishing…

Published on Medium | by Ronit Paikray

LLM Prompt Guide for Red Teamers

To decrypt the intercepted message encrypted with a repeating-key XOR cipher, you can use PowerShell from Command Prompt.

An Exchange server was compromised with ransomware. Use Splunk to investigate how the attackers compromised the server.

How Ignored Issues Like Open Redirects, Verb Tampering, and Minor Info Leaks Can Lead to Account Takeovers and RCE

When I stumbled upon a way to access previously hidden bug bounty rewards on HackerOne using the Wayback Machine, I thought I’d hit upon a…

From Ramen Noodles to Life-Changing Payouts

Practical, actionable steps to dominate API security testing with real-world examples

How Overlooked /v1/, /v2/, and Legacy Endpoints Open the Door to Authorization Bypasses, Logic Flaws, and Forgotten Code Paths

Hey fellow hacker! 👋 Bug hunting often feels chaotic — hundreds of subdomains, unknown endpoints, tools everywhere. I’ve been there too…

Hi, my fellow hackers. This is Rayofhope. I have over 5 years of experience and am currently working as a consultant with a Big 4 firm.

While exploring TikTok’s block and messaging system, I discovered a bug that allowed me to send notifications to a user who had already…