While looking at the TLS 1.3 session ticket handling in wolfSSL, I found a small boundary issue inside SetTicket() in src/internal.c. At first glance, it looks harmless. Just some pointer math and a length check. But the details matter. The code builds a…

وما توفيقي إلا بالله :)

Introduction

It’s been too long since my last blog post and this time around I’m determined to be a bit more consistent. To kick things off, let’s start…

Overview

Many people use the terms dark web and deep web interchangeably. However, they are not the same thing.

Session Management Room Tryhackme

Remember the photo of Pope Francis wearing that massive white Balenciaga puffer jacket?

If we want to properly understand API security, you need to think in layers:

16 zero-day security flaws found in Foxit and Apryse PDF platforms could lead to account takeover and RCE. Learn how AI identified these risks.

Every Red Teamer and Bug Bounty Hunter knows that Reconnaissance (Recon) is the most critical step. In this phase, not only do your tools…

Why Authentication Logic Is the Next Level in Bug Bounty Hunting

We’re back at Cheesy Does It! The only pizza restaurant that somehow stays in business despite losing gargantuan amounts of cash!

Sometimes the most interesting vulnerabilities don’t require complex payloads or advanced exploitation chains. Sometimes, all it takes is…

Object Injection via Oj.load Allows Command Execution in RubitMQ Job Workers

Denoscription

When I first thought of the number 108, I didn’t just see a number — I saw a symbol of wholeness, cycles, and alignment, a concept deeply…

وما توفيقي إلا بالله :)

“What you see is not what runs. Find the truth.”

Hello everyone! It has been an incredible journey sharing my cybersecurity studies at Holberton School Azerbaijan with you.