⤷ Title: I Checked My Website Like a Hacker Would.
════════════════════════
𐀪 Author: Samuel Oluwatosin Adesanya
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 10:17:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #ethical_hacking #web_development #secure
════════════════════════
𐀪 Author: Samuel Oluwatosin Adesanya
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 10:17:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #ethical_hacking #web_development #secure
Medium
I Checked My Website Like a Hacker Would. Here Are 7 Security Mistakes Developers Should Never Ignore
You don't need to be an attacker to think like one. Sometimes, looking at your application from a different perspective reveals security…
⤷ Title: “The Big 4" of Web Application Attacks: How They Hold Up in 2026?
════════════════════════
𐀪 Author: Abdülselam İsmail
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 09:42:04 GMT
════════════════════════
⌗ Tags: #xss_attack #web_security #cybersecurity #sql_injection #computer_science
════════════════════════
𐀪 Author: Abdülselam İsmail
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 09:42:04 GMT
════════════════════════
⌗ Tags: #xss_attack #web_security #cybersecurity #sql_injection #computer_science
Medium
“The Big 4" of Web Application Attacks: How They Hold Up in 2026?
Table Of Content
⤷ Title: Cookie Cutter: Sensitive Data Stored in a Base64-Encoded Cookie
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 19:31:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_penetration_testing #bug_bounty_writeup
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 19:31:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_penetration_testing #bug_bounty_writeup
Medium
Cookie Cutter: Sensitive Data Stored in a Base64-Encoded Cookie
Cookie Cutter challenge on WebVerse Labs.
⤷ Title: Critical Account Takeover via CSRF Header Bypass
════════════════════════
𐀪 Author: Ahmed Mamdouh
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 12:16:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bugbounty_writeup #web_security
════════════════════════
𐀪 Author: Ahmed Mamdouh
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 12:16:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bugbounty_writeup #web_security
Medium
Critical Account Takeover via CSRF Header Bypass
بسم الله الرحمن الرحيم — وَمَا بِكُم مِّن نِّعْمَةٍ فَمِنَ اللَّهِ
⤷ Title: Metasploit Privilege Escalation | UAC Bypass & Sticky Keys Explained
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 14:18:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #bug_bounty #security #artificial_intelligence
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 14:18:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #bug_bounty #security #artificial_intelligence
Medium
🚨 Metasploit Privilege Escalation | UAC Bypass & Sticky Keys Explained
You have access to a Windows machine during a penetration test — but you don’t have administrator privileges. What happens next? 🔥
⤷ Title: Your Website Is Behind a WAF. Is Your Origin Server Still Exposed?
════════════════════════
𐀪 Author: Peter Dunn
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 13:01:03 GMT
════════════════════════
⌗ Tags: #infosec #application_security #web_security #cloud_security #cybersecurity
════════════════════════
𐀪 Author: Peter Dunn
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 13:01:03 GMT
════════════════════════
⌗ Tags: #infosec #application_security #web_security #cloud_security #cybersecurity
Medium
Your Website Is Behind a WAF. Is Your Origin Server Still Exposed?
A web application firewall only protects the traffic that passes through it. Here is how attackers find the side door, and how to close it…
⤷ Title: From POST-Based XSS to Account Takeover: When One Parameter Changes Everything
════════════════════════
𐀪 Author: Ahmed Mamdouh
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 13:30:00 GMT
════════════════════════
⌗ Tags: #web_hacking #hacking #bugbounty_writeup #cybersecurity
════════════════════════
𐀪 Author: Ahmed Mamdouh
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 13:30:00 GMT
════════════════════════
⌗ Tags: #web_hacking #hacking #bugbounty_writeup #cybersecurity
Medium
From POST-Based XSS to Account Takeover: When One Parameter Changes Everything
بسم الله الرحمن الرحيم — وَمَا بِكُم مِّن نِّعْمَةٍ فَمِنَ اللَّهِ
⤷ Title: PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 14:31:01 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #infosec #web_security #portswigger
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 14:31:01 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #infosec #web_security #portswigger
Medium
PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column
Difficulty: Practitioner
⤷ Title: Four Server-Side Attacks Every Pentester Should Know: SSRF, SSTI, SSI & XSLT Injection.
════════════════════════
𐀪 Author: Sowat Kheang
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 16:14:04 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #ethical_hacking #penetration_testing #bug_bounty
════════════════════════
𐀪 Author: Sowat Kheang
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 16:14:04 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #ethical_hacking #penetration_testing #bug_bounty
Medium
Four Server-Side Attacks Every Pentester Should Know: SSRF, SSTI, SSI & XSLT Injection.
How to spot, confirm, and fix SSRF, SSTI, SSI, and XSLT injection.
⤷ Title: How I Exploited a Coupon Logic Flaw to Get €674.90
════════════════════════
𐀪 Author: Shahin Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #business_logic_bug #cybersecurity #business_logic_flaw #web_penetration_testing
════════════════════════
𐀪 Author: Shahin Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #business_logic_bug #cybersecurity #business_logic_flaw #web_penetration_testing
Medium
How I Exploited a Coupon Logic Flaw to Get €674.90 Worth of Candy for €0.00 — Intigriti Challenge #1026
Business logic vulnerabilities are among my favorite bugs to investigate. They don’t always require complex payloads, advanced tools, or…
⤷ Title: Session Swap: Exploiting Client-Side Role Cookies in Access Control
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:53:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #ai #red_teaming #bug_bounty
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:53:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #ai #red_teaming #bug_bounty
Medium
Session Swap: Exploiting Client-Side Role Cookies in Access Control
https://48b0c72c-6357-session-swap-69254.challenges.webverselabs-pro.com/
⤷ Title: The Hidden Security Risks Behind Modern React Apps
════════════════════════
𐀪 Author: Pooja Gandhakwala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:06:01 GMT
════════════════════════
⌗ Tags: #application_security #server_components #web_development #react #nextjs
════════════════════════
𐀪 Author: Pooja Gandhakwala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:06:01 GMT
════════════════════════
⌗ Tags: #application_security #server_components #web_development #react #nextjs
Medium
Your React App Has a Server-Side Attack Surface
What October 2026’s React Server Components and Next.js advisories teach us about shipping safely
⤷ Title: PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column (Manual)
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:11:01 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #cybersecurity #portswigger #infosec
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:11:01 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #cybersecurity #portswigger #infosec
Medium
PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column
PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column Difficulty: Practitioner Target: PortSwigger Web Security Academy Objective The objective of this lab is to …
⤷ Title: How I Found SSRF in 6 Known Companies Using One Methodology in 2026
════════════════════════
𐀪 Author: Shawkatemad
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:28:09 GMT
════════════════════════
⌗ Tags: #hacking #programming #web_security #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Shawkatemad
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:28:09 GMT
════════════════════════
⌗ Tags: #hacking #programming #web_security #cybersecurity #bug_bounty
Medium
How I Found SSRF in 6 Known Companies Using One Methodology in 2026
Bug Bounty SSRF Web Security Methodology Kubernetes
⤷ Title: A 666 EUR box for 66 EUR
════════════════════════
𐀪 Author: Krishna_Jonnagaddala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:36:06 GMT
════════════════════════
⌗ Tags: #ctf #web_security #intigriti #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Krishna_Jonnagaddala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:36:06 GMT
════════════════════════
⌗ Tags: #ctf #web_security #intigriti #cybersecurity #bug_bounty
Medium
A 666 EUR box for 66 EUR
How Intigriti’s October 2026 challenge disguised a one-line coupon bug as an HTTP smuggling puzzle.
⤷ Title: I Found an Open Admin Panel on the UP Ground Water Department Portal
════════════════════════
𐀪 Author: Siddharth
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:25:11 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #web_security #bug_bounty #ethical_hacking
════════════════════════
𐀪 Author: Siddharth
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:25:11 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #web_security #bug_bounty #ethical_hacking
Medium
I Found an Open Admin Panel on the UP Ground Water Department Portal
A robots.txt entry led me there. The page opened without an admin login.
⤷ Title: Redirect Run: Leaking Secrets in a 302 Response Body
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:04:37 GMT
════════════════════════
⌗ Tags: #burpsuite #bug_bounty #ethical_hacking #web_security #cybersecurity
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:04:37 GMT
════════════════════════
⌗ Tags: #burpsuite #bug_bounty #ethical_hacking #web_security #cybersecurity
Medium
Redirect Run: Leaking Secrets in a 302 Response Body
https://795b9a6c-6357-redirect-run-718d5.challenges.webverselabs-pro.com/
⤷ Title: bWAPP: Weak Passwords (Predictable Default Credentials)
════════════════════════
𐀪 Author: Rat-Bully
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:52:54 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #penetration_testing #owasp #ethical_hacking #cybersecurity
════════════════════════
𐀪 Author: Rat-Bully
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:52:54 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #penetration_testing #owasp #ethical_hacking #cybersecurity
Medium
bWAPP: Weak Passwords (Predictable Default Credentials)
Author: Ratbully Platform: bWAPP (Broken Web Application) Lab/Module: Broken Auth, Weak Passwords Category: Broken Authentication / Weak…
⤷ Title: JWT and OAuth: How Tokens and Authorization Fit Together
════════════════════════
𐀪 Author: Vansh Baghel
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:36:50 GMT
════════════════════════
⌗ Tags: #authentication #web_development #api_security #oauth #jwt
════════════════════════
𐀪 Author: Vansh Baghel
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:36:50 GMT
════════════════════════
⌗ Tags: #authentication #web_development #api_security #oauth #jwt
Medium
JWT and OAuth: How Tokens and Authorization Fit Together
What a token proves, how an app gets one, and when a server session is simpler.
⤷ Title: SQL Injection Hands-On: UNION, Blind, and Error-Based Attacks
════════════════════════
𐀪 Author: Loay Essam
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 22:47:04 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #cybersecurity
════════════════════════
𐀪 Author: Loay Essam
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 22:47:04 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #cybersecurity
Medium
SQL Injection Hands-On: UNION, Blind, and Error-Based Attacks
SQL injection is one of the oldest and most dangerous web vulnerabilities, and it is still everywhere. In this writeup I walk through four…