AGAishwary Guptainaishwarygupta.hashnode.dev·7h ago · 7 min readSolution for a Slow Spring Boot ApplicationWhen Logs Stopped Being Enough As developers, we've all been there. An application works perfectly during development, passes testing, and even deploys successfully to production. Then users start rep00
CMCharles Mwangiincharlesbuilds.hashnode.dev·13h ago · 2 min readBuilding Chemist SaaS: This Week in ReviewBuilding Chemist SaaS: This Week in Review I spent this week turning Chemist SaaS from a working backend into something a real pharmacy owner could actually open, look at, and use. Here's what shipped00
SSubhaninmy-cloudjourney.hashnode.dev·20h ago · 2 min readReal-Time Linux System Monitor with FlaskEver wondered how cloud platforms track server health in real-time? While enterprise tools like Grafana are standard, building your own lightweight monitoring dashboard is a fantastic project to under00
RMRenukashree Muraliinquietbytes.hashnode.dev·1d ago · 4 min readJWT Attack Lab — Part 7: When exp Isn't Actually Enforced EverywherePart 7 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 6 spoofed a JWKS URL to bypass RS256 verification entirely. This part00
RMRenukashree Muraliinquietbytes.hashnode.dev·1d ago · 4 min readJWT Attack Lab — Part 5: Path Traversal Through the kid HeaderPart 5 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 4 cracked a weak HMAC secret offline with hashcat. This part doesn't 00
RMRenukashree Muraliinquietbytes.hashnode.dev·2d ago · 4 min readJWT Attack Lab — Part 3: Protecting a Route, Then Bypassing It With alg: nonePart 3 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 2 covered what a JWT actually is and how one gets issued. This part p00
RMRenukashree Muraliinquietbytes.hashnode.dev·2d ago · 3 min readJWT Attack Lab — Part 2: What's Actually Inside a JWT (and Why It Matters Later)Part 2 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. In Part 1, the project got its foundation — a Flask app, an isolated envir00
RMRenukashree Muraliinquietbytes.hashnode.dev·2d ago · 3 min readBuilding and Breaking My Own JWT Auth System — Part 1: Setting the FoundationPart 1 of a series where I build a Flask API with JWT authentication, then deliberately exploit six real vulnerabilities in it — documenting why each one exists at the JWT specification level, not jus00
YPYogeshwar Peelainexploitnotes.hashnode.dev·5d ago · 9 min readHackTheBox : JinjaCareSummary JinjaCare is a Flask-based COVID-19 vaccination verification web app. The intended path chains wkhtmltopdf HTML/local-file injection (via the certificate-generation feature) to disclose the Fl00
BRBharan Reddyinbharanblog.hashnode.dev·6d ago · 7 min readDevOps & Cloud Infrastructure Focus Building, Fixing, and Exposing a 2-Tier Flask App with Docker, Makefiles, and AWS EC2Streamlining Your DevOps Workflow: A Practical Guide to Docker, Makefiles, and Automation As DevOps engineers and developers, efficiency is our ultimate goal. We frequently run tedious multi-step comm00
