Behind the Scenes: Two RCEs in a Single OBS Scene Collection Import
Importing a shared OBS "streaming kit" can silently execute arbitrary code — two independent, unpatched RCE vectors in Scene Collection import, still present as of OBS 32.2.2...
How I Landed in EC-Council's Hall of Fame: Two Unauthenticated Exposures
A leaked Composer credential file and a publicly served ownCloud data directory on EC-Council assets — two simple exposures that earned a Hall of Fame spot...
Subscription Bypass in MalakaBooks: Zero Validation Edition
How a completely unprotected API endpoint let me access premium book subscriptions without paying through an unguarded /mock-activate endpoint...
The Postman Always Rings Twice: SSRF to Root via a Docker Socket
A dead SSRF guard inside Postman's own request library lets an imported Collection reach the Docker Engine API and become root on the host...
The Coffee Order That Made the Database Sleep
What started as a casual coffee order turned into a Time-Based SQL Injection discovery in a mobile ordering API...
Breaking Past 403: A Deep Dive into Out-of-Band SQL Injection Discovery
Hi everyone! Hope you're all doing well. This time, I'm coming back with an interesting story related to an Out-of-Band SQL Injection...
Abusing Broken Access Control and SQL Injection in the Wild
Hi all! How are you guys? I hope everything is fine. It's been quite a while since I last wrote an article — probably over a year...
How Do I Get Root Access on a Linux Server
Hi all! How are you guys? I hope everything is fine. This time, I want to share my experience in getting root access on a Linux server...
From Wedding to Hacking
Hello everyone, how are you all doing? I hope each and every one of you is doing well. In this article, it might be a bit longer than the usual...
Got Access To Server through SQL Injection
Hi, how are you guys? I hope you are fine. This is my first article of the month, I hope you enjoy it...
Got Takeover Account From Multiple Bugs
Hi everyone how are you? I hope you guys are well. I'm RyuuKhagetsu, this is my article in English, sorry if there are any mistakes...
How I Take Over The Scammer's Data
Hi everyone how are you? I hope you guys are well. I'm RyuuKhagetsu, this is my article in English, sorry if there are any mistakes...
Getting P1 Bug Only With My Cellphone
Hi everyone how are you? I hope you guys are well. I'm RyuuKhagetsu, this is my article in English, sorry if there are any mistakes...
Price Parameter Tampering | How I Change Any Price on Website
Hi everyone how are you? I hope you guys are well. I'm RyuuKhagetsu, this is my article in English, sorry if there are any mistakes...
Does MS15–034 Still Exist Today?
Hi everyone how are you? I hope you guys are well. I'm RyuuKhagetsu, this is my article in English, sorry if there are any mistakes...
[Bug Bounty] SQL Injection and Bypass SQL Login
Hi Semuanya bagaimana kabarnya? Semoga dalam keadaan baik baik saja. Kali ini saya ingin membagikan tulisan saya mengenai bug bounty...
[Bug Bounty] Directory Listing on .git Directory
Hi semuanya semoga dalam keadaan baik baik saja, ini merupakan tulisan pertama saya dan semoga tulisan saya bisa menjadi referensi...