Samadhan shimple·Oct 27How a Logout Endpoint Led to an Open Redirect Vulnerability | by Samadhan ShimpleHow a simple redirect_to parameter can turn a trusted application URL into an unexpected external redirect.
Cyril Shaji·Oct 24Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8.4.26Remote Code Execution (RCE) vulnerabilities in core programming language runtimes are rare gems. When CVE-2026-109618 dropped, it…
Chris Huffstetler·Oct 23Demystifying Scaled Scoring: From the New OffSec Update to the CompTIA StandardHow the Shift to Psychometric Math Standardizes Practical Pentesting Exams Without Changing the Hands-on Difficulty
Mohammed Salah Khaleel·Oct 23OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I LearnedI had 8 hours left and only needed one more flag. I gave up. I still don’t know why.A response icon1A response icon1
InBug Bounty HuntingbySamadhan shimple·Oct 20How to Find Classic Bugs Hiding Inside AI Features ?AI is changing how we interact with applications. Today, we can ask a chatbot to summarize documents, search company data, analyze files…A response icon1A response icon1
