Cybersecurity writeups, CTF guides, and offensive security notes.https://abdulgaphy.vercel.app/https://abdulgaphy.vercel.app/posts/pentest/change-somebody-elses-password/https://abdulgaphy.vercel.app/posts/pentest/change-somebody-elses-password/A password-change endpoint that trusted the email in the request body instead of the session that sent it.Sun, 23 Aug 2026 00:00:00 GMThttps://abdulgaphy.vercel.app/posts/pentest/none-of-your-business/https://abdulgaphy.vercel.app/posts/pentest/none-of-your-business/How a forgotten 'alg: none' code path turned a read-only audit token into full admin access.Sun, 23 Aug 2026 00:00:00 GMT