A_box4·3d agoAuthentication Bypass via Password Reset Flow Manipulationقَالُوا سُبْحَانَكَ لَا عِلْمَ لَنَا إِلَّا مَا عَلَّمْتَنَا ۖ إِنَّكَ أَنتَ الْعَلِيمُ الْحَكِيمُ
Faresmohamed·Oct 27Basic SQL Injection — Part 1Scope of this post: this is Part 1, covering error-based/in-band SQLi through two beginner labs. Part 2 will cover UNION-based and Blind…
Kumarsaichandu·Oct 2My Web Pentesting JourneyI recently completed the Guided Pentest: Web room on TryHackMe. This lab provided a practical experience of how a web application…
Krishn Babariya·Sep 30The Tiny Project Logic Bug That Unlocked EnterpriseHow a tiny edge case in project grouping turned into a subscription-boundary bypass.
Krishn Babariya·Sep 14Building AI Pentester, Week 4: Recon Found the Routes. The Application Model Found the Tests.Last week, I turned Recon from a collection of tools into a pipeline. Its final output was no longer just scattered files; it was a…
Urshila·Sep 13Encoding a Full Web Pentest Methodology as a Claude SkillThe architecture of web-pentest-skill, an Agent Skill that runs an engagement from scoping to a CVSS-scored report without exhausting the…
Krishn Babariya·Aug 23Building AI Pentester, Week 2: Scope Parsing Is More Important Than It LooksThis week I worked on the Program layer of AI Pentester, and it turned out to be much more important than I first thought.
