Mar 3 · 5 min read · Sometimes, the best lessons in web development and security come from staring at a seemingly bulletproof application until its underlying mechanics finally crack. We had been deep in the trenches with
Join discussion
Feb 15 · 6 min read · 📚 Before Start (experienced hackers can skip this) Burp Suite is a powerful tool for web security testing, widely used by ethical hackers and penetration testers. It allows you to intercept, modify, and analyze HTTP/S traffic — think of it as Wiresh...
Join discussion
Jan 14 · 4 min read · Intro Hi my name is Nadir Feroz a 22-year-old Bug Bounty Hunter focused on web application security. I have been testing and reporting security vulnerabilities for almost 2 years. This is my weblog where I am going to share some of my finding in here...
Join discussion
Dec 22, 2025 · 2 min read · 🔥 TIER-1: 2025 ACTIVE & MAINTAINED PROGRAMS inurl:/responsible-disclosure intext:"effective date" intext:"2025" inurl:responsible-disclosure intext:"Effective Date" intext:"2025" -hackerone -bugcrowd inurl:vulnerability-disclosure intext:"Last updat...
Join discussion
Dec 8, 2025 · 2 min read · 💀 Same Origin Policy (SOP) Hey there! In this post, we’ll dive into the Same Origin Policy (SOP) — a crucial web security mechanism designed to prevent malicious attacks and protect user privacy. 🧠 What is SOP? Same Origin Policy (SOP) is a securi...
Join discussion
Dec 8, 2025 · 2 min read · HTTP Cookies are small pieces of data created by a web server while a user is browsing a website and stored on the user’s device by their web browser. When a user visits a website, the browser automatically sends any cookies that belong to that site ...
Join discussion
Dec 3, 2025 · 9 min read · There is a reason mobile app bug bounty hunting feels like a secret world. Most newcomers hit the Web first. It is easier to proxy, easier to brute force, easier to pattern match. But mobile? That domain still feels foggy and locked away. People talk...
Join discussion
Dec 3, 2025 · 4 min read · I find it so interesting Exegy wanted to weaponize their non-disclose agreement (NDA) against me, especially with it being used in a lawsuit against me four months later. Their NDA is not even up to date on the laws regarding the matter, since it tri...
Join discussion
