GraphQL for Bug Bounty

GraphQL is getting popular day by day. Currently, it is being used by tech giants like Facebook, Twitter, Github, and…

Pwning PHP: Remote Code Execution

RCE allows an attacker to execute code on the vulnerable machine…

DOM Clobbering

DOM clobbering is a technique to escalate HTML injection to XSS which has a high impact.

Retrofit with ViewModel in Kotlin (Part-1)

Retrofit: Library to make API calls.

NAT Slipstreaming

I used to think if a device is not exposed to the public internet, it is safe, because bad actors cannot access them as it has…

JavaScript Prototype pollution

Prototype pollution (not to be confused with Parameter pollution)is a little-known bug. Unlike SQL…

Prompt.ml XSS Challenge

prompt.ml is a series of challenges that are designed to pique your interest and increase your knowledge on XSS…

Pwning PHP Websites: RFI & LFI

PHP is one of the widely used languages for web development (more than 60%) which makes it one of the most targeted ones.

Also, PHP websites are common in CTFs because it is easy to write vulnerable code in PHP.

How to make a simple RecyclerView in Android Studio

RegEx Crosswords

If you’re like me, you already know or have heard about RegEx (Regular Expressions), but didn’t know that RegEx crossword puzzles…