Hey hackers 👋 — this post is a fun deep dive into a critical authentication vulnerability I discovered during a recent security test. It combines one of my favorite web bugs (race condition) with a…

Hey folks!
 In this write-up, I’ll walk you through how I earned a $150 bounty for discovering a Broken Access Control vulnerability using…

Fifteen years ago, I was just a teenager screwing around with websites.
My friends and I used to hang out, poke into sites we didn’t own…

Introduction: The Opportunity of a Lifetime

Tips for becoming a report conoisseur

CTFs aren’t just puzzles — they’re secret ground to practice!

Why Apple is paying more — and handing out iPhones — to force a change in how security research works.

Think of a smart contract like a digital vending machine:

Introduction: The Rise of the Faceless Hacker

After earning some reputation points from public programs on HackerOne, I was excited when I received my first invitation from — let’s…

Here’s my honest take after almost 2 years of hacking

Introduction

Nothing Just another day another target story

Yo whats up peeps, its MRKNIGHT-NIDU here! Today Im spilling the tea on how I nabbed this high sev find on a subdomain of amsterdam.nl, got…

I was hunting a target, reported a few vulnerabilities, and will continue with my hunting.

Author: safehacker_2715
Vulnerability : Insecure Direct Object Reference

An honest write-up of a High-severity finding I thought I had, and why the platform killed it before I could submit.

🧠 Idea That Hit Me Today…

Hello everyone 👋

We’re opening the doors to our Next.js 16 + Supabase full-stack CMS and giving away lifetime premium licenses to everyone who helps us…