MMuhammad Manamil·11h agoHow to Find All Subdomains of Any Website (Free, No Install)Find every subdomain of a website for free, with live status, IP and hosting country. A quick guide for bug bounty, sysadmins and SEO.2 min read·manamil.hashnode.dev
IIliya·Sep 29Intigriti September 2026 Challenge, Critter GalleryA blank 200 error page, a one-column UNION, and a base64 parameter that hid it all.8 min read·blog.iliyadindar.site
TThe Flux Read·Sep 24Researchers Used Claude to Hack OpenAI — Here’s How the Chain WorkedLearn how security researchers used Claude to exploit a zero-day flaw, bypass OpenAI's SSO identity sandbox, and access internal repositories in 72 ho1 min read·thefluxread.hashnode.dev
KKrishn Patel·Sep 3Building AI Pentester Week 3: Recon Got Better When I Stopped Treating It Like Output Collection This week I worked on recon, but the real problem was not adding more tooling. The real problem was making recon useful to the stages that come after it. At the start of the week, AI Pentester could a3 min read·ai-pentester.hashnode.dev
ZZeroProtocol·Aug 14Client-Side Web Security EssentialsLearn how HTML, JavaScript, DOM, Ajax, JSON, forms, cookies, and sessions shape web applications and their security attack surface.8 min read·webpentestingdeepdive.hashnode.dev1
Kkareem Mohamed·Aug 10Weaponizing Time: An Elite Guide to Race ConditionsA guide to race condition vulnerabilities, TOCTOU flaws, and limit overruns in web application security by 0xY0K4_CL4W.9 min read·kmb.hashnode.dev
BB0dj0x·Jul 27How to Start Bug Bounty Hunting in 2026: The Complete Beginner's GuideHow to Start Bug Bounty Hunting in 2026: The Complete Beginner's Guide6 min read·b0dj0x.hashnode.dev1
YYogeshwar Peela·Jul 18FAM CTF : The Cloud writeupExploit SSRF to bypass IMDS filtering, steal AWS IAM role creds, abuse SigV4 presigned URLs, bypass VPC S3 policy, and capture the FAM flag7 min read·exploitnotes.hashnode.dev
YYogeshwar Peela·Jul 17HackTheBox : Void Whispers WriteupLearn how to exploit the Void Whispers challenge using OS command injection, bypass the space filter with IFS, and retrieve the flag safely. Now! Fast4 min read·exploitnotes.hashnode.dev
Ssecurity_researcher·Jul 3Breaking Through the Invisible Walls: How JS Recon and Parameter Pollution Exposed Sensitive KYC DataSome of the best vulnerabilities are hidden not in plain sight, but in the dark, forgotten corners of an application. This writeup details the discovery of a logical flaw chain within a project manage5 min read·security11.hashnode.dev
