Where Hackers Learn to Think
Where Hackers Learn to Think
Follow my journey as a Ethical Hacker. In these blogs, I share beginner-friendly tutorials, practical hacking techniques, and personal research as I explore the world of cybersecurity. Whether you’re just starting out or looking to learn through real experiences, this blog is for you.
SameSite=Strict Cookies are supposed to be a strong shield against CSRF (Cross-Site Request Forgery). When a cookie has this attribute, the browser refuses to send it on cross-site requests. In theory, this kills CSRF dead. In practice, if the target…
Most CSRF protections tie a token to the user’s session. If the token and the session don’t match, the request gets rejected. Simple, effective – usually. But what if the token is only tied to a second cookie, not the…
Hey everyone! I’m Husnain, a Jr. Penetration Tester, and during one of my recent engagements I came across a Vertical Privilege Escalation bug that honestly surprised me with how simple it was. No fancy exploit chain, no CVE – just…
Hey everyone! I’m Husnain, a Jr. Penetration Tester, and I love sharing my experiences from real-world pentests. Today, I want to talk about something cool that happened in one of my recent tests. I found a simple XSS bug, which…
Let me be straight with you. Most “ethical hacking roadmaps” online are either too vague, outdated, or written by someone who hasn’t actually done the work. I’ve been there, I know what it’s like to stare at a screen not…