Dec 31, 2025 · 3 min read · Most security labs are built around predictable, well-documented vulnerabilities. But every once in a while, during experimentation, you try something that should not work, yet it works perfectly. This is the story of how a simple challenge in Web fo...
Join discussionDec 24, 2025 · 2 min read · NOTE: This post is for educational purposes only. Please use the information responsibly and legally. While solving an XSS lab, I followed a simple and repeatable methodology that helped me identify how user input was being handled and where script ...
Join discussion
Dec 21, 2025 · 2 min read · NOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Improper File Upload Validation / Security Misconfiguration) While testing example.com using Burp Suite, I found a common but often overlooked sec...
Join discussion
Dec 20, 2025 · 2 min read · NOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Missing Security Header – HSTS) While testing a website using Burp Suite, I found a common but often ignored security issue:HTTP Strict Transport ...
Join discussion
Dec 18, 2025 · 2 min read · NOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Missing Rate Limiting Protection)While testing a website using Burp Suite, I found a common but serious security issue:No rate limiting was impleme...
Join discussion
Dec 17, 2025 · 2 min read · NOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Missing Secure Flag) While testing a website with Burp Suite, I found a simple but important security issue:Sensitive cookies were missing the Sec...
Join discussion
Oct 2, 2025 · 1 min read · NOTE: This post is for educational purposes only. Please use the information responsibly and legally. The following you see is the HTTP Response header. HTTP/1.1 200 OK Date: Thu, 02 Oct 2025 18:30:00 GMT Server: nginx/1.24.0 Content-Type: text...
Join discussion
