A GraphQL introspection writeup from BugForge Labs. The API happily described its own schema, and that map led straight to an unauthorized mutation and the flag.

A CCNA study note breaking down the TCP/IP model layer by layer - protocols, standards, encapsulation, PDUs, and how it compares to the OSI model.

A JWT algorithm-none attack chained with an API version downgrade writeup from BugForge Labs. The new API rejected the forged token - but the old one didn't.

A predictable admin access token writeup from BugForge Labs. The token looked random at first glance, but comparing it across two accounts revealed a fixed prefix and a brute-forceable 3-character suffix - this is the full process from spotting the cookie to getting the flag.

A UNION-based SQL injection writeup from BugForge Labs. The login page looked safe, but a product endpoint wasn't - this is the full process from finding the injection to dumping the users table and getting the flag.