When hunting on a site I tend to just poke around, gauge the functionality and see logically what can be broken before I fuzz.

A practical, step-by-step methodology for bug bounty hunters and security researchers

In this WordPress penetration test activity, I used the KISS (“Keep it simple, stupid”) principle to compromise an administrative account…

Concierge Briefing

A walkthrough of TryHackMe’s “Room 404” — Very Easy, 30 points, Web category — Day 2 of the Hacker Holidays event at the Byte Lotus Hotel.

Giriş

Uncovering Hidden Content Through Web Enumeration and Reconnaissance

Solution:

In this challenge, a seemingly harmless web server exposed a configuration file containing SSH credentials. Those credentials granted…

Introduction

While running my autonomous web-security hunting workflow, I discovered an interesting access-control issue involving a WordPress property…

Introduction

How I went from a guest login to full SSH access.

Email verification is supposed to establish one simple security property:

Section: 01 — Lab & Objective:

Sometimes the most interesting API vulnerabilities aren’t hidden behind complicated authorization logic.

The lab’s rate limit can be bypassed by batching multiple login operations into one GraphQL request using aliases, rather than sending each…

This labs takes my time because i stuck in that URL encode part so lets starts how i solved this lab.

Part 1 of my OWASP Top 10 series — explained for beginners, with a live hands-on lab.

بسم الله الرحمن الرحيم — وَمَا بِكُم مِّن نِّعْمَةٍ فَمِنَ اللَّهِ