I Just Sent XSS Payloads to the Support Team
The best part about doing security testing on your own systems is that you can be as reckless as you want. The worst part is realizing yo...
NedTechie
When Your Internal Fields Aren't Internal: The Day I Deleted My Own Account
I deleted my own account today. Not on purpose. I’m not that chaotic. I was testing something, and then… I couldn’t log in anymore. Let...
The CORS Rabbit Hole I Didn't Want to Go Down
I was supposed to be testing SQL injection. That’s what my notes said: “Test for SQL injection in search endpoints.” But you know how it ...
5,000 Attack Vectors Later: What I Learned From Testing Everything
I’ve been staring at this terminal for three days. Not continuously, obviously. I sleep. Sometimes. But I’ve been running tests. Lots of...
From DevOps to DevSecOps: Why I Started Breaking Things on Purpose
I’ve been a DevOps engineer for a long time. Nearly two decades, if you count the years before we called it DevOps. Back when it was just...