Skip to content

DEV Community

Krishna Kumar

404 bio not found

Joined on Nov 30, 2025

Nov 13

🪟 Clickjacking: When a Missing X-Frame-Options Is a Real Bug

#security #webdev #bugbounty #appsec

10 min read

Nov 12

🧟 Old API Versions: Find the /v1 That Never Died, Then Prove It

#security #api #bugbounty #appsec

11 min read

Nov 11

🕸️ GraphQL BOLA: One Object, Many Paths, and How to Prove the Gap

#security #api #bugbounty #webdev

10 min read

Nov 10

🧪 Nuclei Regression Templates: Make Every Proven Bug Stay Fixed

#security #appsec #devops #tutorial

11 min read

Nov 9

🍪 CSRF in 2026: Why SameSite Isn't Your Fix (and What Is)

#security #webdev #appsec #python

9 min read

Nov 8

🔀 Open Redirects: Why Your ?next= Check Fails, and How to Prove It

#security #webdev #appsec #javascript

9 min read

Nov 6

🕵️ Hidden HTTP Parameters: Find Them with Arjun, Then Prove They Matter

#security #bugbounty #api #tutorial

10 min read

Nov 5

🔑 JWT Verification Bugs: Pin the Algorithm, Then Prove the Fix

#security #appsec #python #javascript

9 min read

Nov 3

📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

#security #bugbounty #appsec #webdev

10 min read

Nov 2

🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits

#security #bugbounty #cybersecurity #tutorial

9 min read

Nov 1

🗂️ Path Traversal: Why Your ../ Filter Fails (and the Fix That Holds)

#security #python #webdev #appsec

8 min read

Oct 31

🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them

#security #javascript #bugbounty #webdev

10 min read

Oct 30

🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove

#security #ai #cybersecurity #bugbounty

8 min read

Oct 28

🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins

#security #api #bugbounty #webdev

7 min read

Oct 21

🔓 IDOR / BOLA: How to Find the #1 API Vulnerability — and Actually Prove It

#security #api #bugbounty #webdev

7 min read

Oct 21

Detection Is Not Proof: How to Verify a Bug Before You Report It

#security #bugbounty #webdev #beginners

4 min read

Aug 21

Why an Open-Source AI Pentester Should Prove Vulnerabilities, Not Just Predict Them

#opensource #security #ai #devops

5 min read

loading...