Vishnubalaji·1d agoTesting Whether an AI Can Think Like a HackerI pointed an AI assistant at a real browser and asked it to find security bugs in web applications — without telling it what to look for…
Kaustubh Asthana·3d agoWeb Shell Upload via Race ConditionNot fooling the filter at all, but catching the server in the half-second gap between accepting a file and deleting it
Kaustubh Asthana·5d agoRemote Code Execution via Polyglot Web Shell UploadNot disguising a PHP file as an image, but building a file that is honestly both at once
Kaustubh Asthana·6d agoWeb Shell Upload via Obfuscated File ExtensionWhen a filter trusts whatever sits at the end of a string, and a single null byte quietly moves where that ending actually falls
Ali Zamini·Nov 3It Remembered Me: How a Marketing Cookie Became a One-Click PII LeakA dead-end subdomain, a second look, and a tracking cookie that turned out to be a session.
Kaustubh Asthana·Nov 2Web Shell Upload via Extension Blacklist BypassNot disguising a shell as PHP, but convincing Apache to treat a brand-new extension as PHP in the first place
Shadow·Nov 1API Security Testing: A Complete Guide to Reconnaissance, Hidden Endpoints, Mass Assignment, and…APIs are one of the most important components of modern web applications. They connect front-end interfaces with back-end services, handle…
Will Giles | Cybersecurity·Nov 1Insecure Deserialization: How to Turn Trusted Data Into a Reverse ShellA hands-on lab walkthrough against PHP and Java web targets
Shadow·Nov 1GraphQL API Security: Reconnaissance, Common Vulnerabilities, Exploitation Techniques, and…Introduction
