Signal Acquired: Welcome to the Grid
Ilyas Salioui (TheCzar) opens a new home for offensive security research, bug bounty notes, and the occasional writeup.
Cookie Tossing: Escalating Low-Impact XSS into Criticals
How a low-impact XSS or a controlled subdomain can become a critical account takeover through cookie tossing — cookie scoping, path precedence, attack patterns, and defenses.
Origin IP Discovery Techniques: How Attackers Bypass WAF Protections
A practical recon guide to finding a target's origin IP behind Cloudflare and other WAFs — DNS history, favicon hashes, Shodan, certificate matches, and verification.