![](https://samhilliardblog.com/wp-content/uploads/2023/07/evil-file-min.jpeg)
Remote code execution via polyglot web shell upload – Portswigger Web Security Academy Lab Walkthrough
In this lab, we will bypass...
![](https://samhilliardblog.com/wp-content/uploads/2023/06/access_control-min.jpeg)
Make access control bug discovery fast and easy with Autorize
We’re back from our slight detour...
![](https://samhilliardblog.com/wp-content/uploads/2023/06/wfuzz-header-1024x585.png)
![Purple dropper feeds samples into array of test tubes.](https://samhilliardblog.com/wp-content/uploads/2023/05/louis-reed-pwcKF7L4-no-unsplash-1024x683.jpg)
Unveiling my Methodology for Exciting Bug Discoveries and Optimal Results
When I first started getting into...
![](https://samhilliardblog.com/wp-content/uploads/2023/04/map-apis-cover-1024x683.jpg)
How To Reverse Engineer API’s To Boost Your Bug Bounty Workflow
Recently, I’ve been working on APIsec...