latest writeup (20 June 2026)
see all writeups →Disclaimer: All writeups on this site are based on intentionally vulnerable applications and platforms designed for security education and practice (such as HackTheBox, TryHackMe, BugForge, WebVerse, and Vulnhub). The techniques, payloads, and exploits demonstrated are shown strictly for educational purposes to illustrate web application security concepts. The author accepts no responsibility or liability for any actions taken by readers based on the content of these writeups. Do not attempt to use any techniques, tools, or payloads shown here against any system, application, or network without explicit written authorisation from the owner. Unauthorised access to computer systems is illegal and unethical.