Blog

Welcome to our blog hub, a space where we share valuable insights, stories, and knowledge across a range of topics. We hope you find the content enriching and inspiring. If you have any questions or feedback, feel free to connect with us using the contact details at the bottom of the page.

Local File Inclusion via XSS in Prince PDF Generator

Read how a restricted JavaScript runtime in Prince PDF Generator can be exploited for Local File Inclusion and sensitive file exposure.

quick-readprince+4

September 2025

From .git Disclosure to Remote Code Execution & More

A step-by-step walkthrough of how a simple .git disclosure escalated to unauthenticated email abuse and full remote code execution, as part of a real-world bug bounty engagement by Sudarshana.

bug-bountyweb-security+5

July 2025

Fun Way to Bypass an Open Redirect Patch

Learn how a patched Open Redirect vulnerability was bypassed using advanced URL fuzzing techniques. This real-world example shows why manual testing still beats automated tools in web security.

quick-readopen-redirect+4

June 2025