6 posts from this period
Technical writeup of identifying and exploiting broken access control vulnerabilities in a legacy web application during a penetration test.
Exploring how AI and LLMs are being used in offensive security operations, from reconnaissance to payload development.
Master Burp Suite with techniques used by professional bug bounty hunters: from basic interception to advanced automation.
Create targeted wordlists for password attacks and content discovery using CeWL, Crunch, and other techniques.
Learn exploit development fundamentals by creating a simple buffer overflow exploit in Python, step by step.
Understanding DNS rebinding attacks: how they work, why they're dangerous, and how to demonstrate them in a lab environment.