AacidvegasOct 12 · 16 min readThe Mystery of ASJO.ORGI have an obsession with internet anomalies. Weird traffic patterns, unexplained phenomena in protocol-level data, the kind of stuff that makes you open 40 browser tabs at 2 AM. I run a DNS honeypot cacidvegas.hashnode.dev
DDimakatso SebataneOct 10 · 12 min readCase Study: Pre-Account Takeover via OAuth MisconfigurationRelevant CWE: CWE-287 — Improper Authentication - Generic Introduction Imagine signing up for a new platform using your Google account. You successfully authenticate, access your dashboard, and start ovawatch-security.hashnode.dev
DDimakatso SebataneOct 3 · 11 min readCase Study: From HTML Injection to Credential Theft Relevant CWE: CWE-79 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Introduction When we think about vulnerabilities that lead to account compromise, SQL Injectovawatch-security.hashnode.dev
MMehmood AliSep 30 · 1 min readTryHackMe CC: Pen Testing - Full Walkthrough (2026)Note: I originally published this guide on my blog…crackingstation.hashnode.dev
PPass RevelatorSep 26 · 4 min readHow Law Enforcement Uses AI & Cybersecurity Software Pass Revelator to Reunite Stolen DevicesCase study on how a French municipal police department addresses the challenge of password-protected recovered laptops. Official handover of Pass Revelator to the Municipal Police — Photo credit: Pascpassrevelator.hashnode.dev
AAlejandro BañoSep 21 · 14 min readBusiness Logic Flaws: When the bug is the behaviorIntroduction Most security vulnerabilities exist because the code does something it shouldn't: it trusts unsanitized input, exposes internal state, or fails to enforce access controls. Business logic blog.cain.tech
AAbdulaziz SaadSep 19 · 10 min readFrom Establishment IDOR to Account Takeover: Changing One Number Was EnoughSeverity: HighBounty: ~$1145Program: Private Bug BountyPlatform: Bugbounty.sa Some account takeovers start with stolen passwords, leaked tokens, or complicated OAuth chains. This one started with chanblog.abdulaziz-d.com
DDavid EssienSep 19 · 6 min readOne Missing Parameter Cost Me Six Hours (PortSwigger Lab)I spent six hours trying to upgrade a non-admin user to admin, convinced I was missing some clever bypass. The gap turned out to be one field in a request body I'd already looked at twice. This is a P12Mdavid-essien.hashnode.dev
AAeon Flex / Splicer ScornSep 17 · 7 min readTool Poisoning on MCP Servers: The Attack Vector Nobody's PatchingThe MCP (Model Context Protocol) ecosystem grew from a specification into production infrastructure faster than most teams can spell "threat model." And that speed left a gap: the layer where an agent1Cchaincoder.hashnode.dev
AAeon Flex / Splicer ScornSep 17 · 8 min readRansomware Operators Are Using AI Coding Agents NowA ransomware crew used Cursor to write exploit code for ESXi hypervisors this month. Not a hypothetical. Not a tabletop exercise. The Aurora group integrated AI coding agents into active operations anchaincoder.hashnode.dev
