Non-technical

On PentesterLab’s blog, there’s a great article that will help you order some things in your mind if you want to land your first job in our fantastic industry. You probably noticed already how many different areas there are inside cybersecurity. Which of them you...

The community vote is live for the top 10 web hacking techniques 2021! There are tons of mind-blowing writeups there. Some of them, of course, were covered here or on my YouTube. Out of those nominated bugs, we - the community - now choose the top 15 out of which the...

I know many people in our space will always tell you that bug bounty is awesome, bugs are everywhere and all you need to do is try harder. Such narrative gives viewers or readers positive emotions. Positive emotions result in more likes and views because it gives...

The final list looks like this: 1 - Dependency Confusion 2 - HTTP/2: The Sequel is Always Worse 3 - A New Attack Surface on MS Exchange 4 - Exploiting Client-Side Prototype Pollution in the wild 5 - Hidden OAuth attack vectors 6 - Cache Poisoning at Scale 7 - JSON...