Auditing an MCP server: 2 flaws that keep showing up in production
Command injection and path traversal in remote MCP servers: the vulnerable file and line, a curl PoC for each one, and the fix, with your own lab to practice safely.
Category
Penetration Testing
Exploitation techniques, vulnerability analysis and intrusion testing.
How AI is changing the rules of bug bounty
AI applied to bug bounty is no longer futurism: it speeds up recon, prioritises findings and drafts reports. Real use cases, hard limits and concrete risks.
Integrating GitHub Actions + ELK into bug bounty
How to spin up ephemeral scanning infrastructure with GitHub Actions and DigitalOcean, and ship the results to an ELK stack for real-time metrics and visibility.
Bug Bounty Tool: El Kraken
El Kraken is a modular bash tool that automates recon and known-CVE exploitation end to end, chaining nuclei, subfinder, wayback and dirsearch together.
Exploiting IDORs: detection, impact and prevention
What an IDOR is, how it is exploited by changing an identifier in the URL, which tools detect it in Burp Suite or ZAP, and the four practices that prevent it.
