Cybersecurity, programming, and tech writeups
Café Coffee Day's tagline is "A Lot Can Happen Over Coffee." They weren't kidding. Over two evenings in July 2026, working from nothing but curiosity and a copy of their Android app, I found a chain of vulnerabilities that, stitched together, handed me the phone numbers, emails, invoices and eventually the accounts of what looked like every CCD customer in the country. All of it starting from a…
every few days someone messages me asking how to get into hacking. it's always roughly the same shape. "bro how do i become a hacker", "what roadmap do i follow", "which course should i buy", "is OSCP worth it", "drop the resources pls". sometimes there's a youtube thumbnail attached, guy in a hoodie, green text raining down behind him. sometimes it's a notion template someone actually paid money…
I first posted a rough write-up of these vulnerabilities to r/CBSE using a throwaway reddit account, but I figured a proper write-up on my own blog would be a better home for it. The tweet (X post) where this is being discussed can be found here . These vulnerabilities were initially discovered on 25 February 2026 and were promptly reported to CERT-In. What is CBSE and On-Screen Marking? The…
Security issues appear as platforms grow but what matters is how they are discovered, shared and fixed. In January 2026, I came across a bunch of security vulnerabilities in the FOSS United platform. The platform being open source made it much easier for me to find the vulnerabilities. The findings were shared privately with the FOSS United team and the vulnerabilities were patched before…
Most people assume clearing cookies or using incognito mode makes them anonymous. It does not. Modern websites can still recognize you using browser fingerprinting. This post explains how browser fingerprinting works and how I built Quark to understand it from the inside. What is Browser Fingerprinting? Browser fingerprinting identifies a browser by collecting information it already exposes.…
I wrapped up my first corporate internship recently. I worked as a software engineering intern at a hardware cryptocurrency wallet company. It was okay. I learned a lot and the people were genuinely nice. But working in a closed, corporate environment felt… weird. Everything is planned, scoped, reviewed, and filtered so much that sometimes the fun just leaks out. I also learned that I can work…
What is OSINT? OSINT (Open Source Intelligence) involves collecting and analyzing publicly available information from sources like publications, media, websites, social media, and government reports to support decision-making in fields like national security and business intelligence. OhSINT TryHackMe Room: https://tryhackme.com/r/room/ohsint This room is all about getting information about an…
A friend of mine was organizing an ARG/Cryptic Hunt competition for his school's techfest/competition. He built the site/platform where the competition was being hosted all by himself. But it was buggy, really buggy and had a lot of vulnerabilities. Here are the mistakes he did which made his ARG website hackable and vulnerable : Not using an actual backend & some other stupid mistakes : Yep, he…