Step-by-step, hands-on guides that take you from setup to a working result — web and API exploitation, network attacks, reconnaissance, and security automation, each with the tools, prerequisites, and outcomes laid out up front.
Learn how to install Kali Linux dual boot alongside Windows 10/11. Complete step-by-step guide with partitioning, GRUB setup, troubleshooting, and safety warnin…
Transparent vs UUPS, uninitialized implementations, and storage-layout collisions — local forge inspect lab. No live upgrades.
How to write an Immunefi-ready bug report: structure, PoC expectations, severity language — template practice only.
First-depositor donation can round the next mint to zero shares. Local toy vault plus OpenZeppelin virtual-offset discussion.
Missing chainId, permit phishing, and ecrecover to the zero address — replay a toy signature across two local chain ids.
Spot, TWAP, and Chainlink staleness for bug hunters — price-assumption checklist on a local toy lender. No live oracle attacks.
Flash loans as amplifiers — not magic bugs — with Aave-style callback mental models and DVD / local CTF lab pointers. Authorized labs only.
Hunter workflow for verified and unverified contracts: Etherscan Contract tab, Sourcify exact vs match, ABI decoding, and read-only cast storage on a public exa…
Access control bugs hunters actually find — missing onlyOwner, initializer takeover, and tx.origin auth — with an Ethernaut-style Foundry lab.
Practical Foundry + Slither setup: foundryup, forge init, Slither venv, slither . on a local vulnerable vault, optional Aderyn. Anvil/local forks only.
Classic, cross-function, and read-only reentrancy for bug hunters — CEI, guards, OWASP SC08:2026, and a Foundry PoC against a local vulnerable vault only.
Solidity for bug hunters: a read-first primer on visibility, msg.sender vs tx.origin, call vs delegatecall, value transfers, and CEI — with tiny snippets only.…
