ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 18 · 4 min readWeb App Recon (Part-3)Finding Hidden Content and Functionality When assessing a web application's security, its visible structure alone isn't enough. Content and functionality that aren't linked from anywhere within the ap00
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 15 · 6 min readEncoding in Web ApplicationsWeb applications move data constantly—through URLs, form fields, cookies, headers, and API payloads. The catch: many transport mechanisms (especially URLs and HTML) are text-oriented, while real input11Z
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 14 · 8 min readClient-Side Web Security EssentialsModern web apps aren’t just “pages in a browser”—they’re interactive systems where the client (browser) and the server continuously exchange data and decisions. If you’re learning web application secu10
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 10
TLTirthak Likharintirthaklikhar.hashnode.dev·May 7 · 11 min readTryHackMe SEC1 Certification: A Honest, Detailed ReviewSEC1 is one of the few beginner certifications that actually puts you inside a real environment and asks you to work. This is a first-hand account of what the exam looks like, where it tests you hard,00
SSl4cK0THinz2r.zor0ark.me·May 6 · 7 min readTryHackMe — Recruit WalkthroughChallenge Link: https://tryhackme.com/room/recruitwebchallenge Introduction The "Recruit" challenge on TryHackMe is a fantastic playground for demonstrating how low-severity vulnerabilities can be ch10
SSl4cK0THinz2r.zor0ark.me·May 5 · 6 min readWebVersePro Labs - Labs: NewsForge Writeup (Command Injection)Challenge Link: https://dashboard.webverselabs-pro.com/labs/newsforge Introduction Welcome back to another CTF writeup, we are tackling NewsForge, an easy-level web challenge from the WebVersePro Lab00
ZHzahi halimiinzahihalimi.hashnode.dev·Dec 31, 2025 · 3 min readHow I Accidentally Discovered an Undocumented Behavior in “Web for Pentester 1”Most security labs are built around predictable, well-documented vulnerabilities. But every once in a while, during experimentation, you try something that should not work, yet it works perfectly. This is the story of how a simple challenge in Web fo...00
VVishantinvulnvault.hashnode.dev·Dec 24, 2025 · 2 min readFinding Cross-Site Scripting (XSS) Using a Practical Testing MethodologyNOTE: This post is for educational purposes only. Please use the information responsibly and legally. While solving an XSS lab, I followed a simple and repeatable methodology that helped me identify how user input was being handled and where script ...00
VVishantinvulnvault.hashnode.dev·Dec 21, 2025 · 2 min readFinding a File Upload Misconfiguration using Burp SuiteNOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Improper File Upload Validation / Security Misconfiguration) While testing example.com using Burp Suite, I found a common but often overlooked sec...00
