Shashank's Security Blog

This bug is about a private target I was hunting. I passed all the subdomains to FFUF , a great tool written in GoLang to brute force direct...

I was hunting on a private program. One of the common things I do is look for leaked credentials on Github. I give special attention to dele...

Hello World! Not a fancy blog post, but I just discovered that subdomain takeover is possible for "readthedocs." What is a su...

First of all, I would like to give credits to original researchers who highlighted this issue into the public. The original blog post can ...

Let's get familiar with a few things first! What is Github? GitHub is a web-based hosting service for version control using Git. Git...