Security Blog - Mesbaul Islam

IDOR & Account Takeover

Critical vulnerability leading to full account compromise.

Api Discovery Pro

A lightweight Burp Suite extension for automatic API endpoint discovery and OpenAPI (Swagger) generation.

Suricata & Mod Security

From DVWA Installation to Suricata and WAF Configuration.

Exploiting Log4shell

A hands-on walkthrough of exploiting the Log4Shell (CVE-2021-44228) vulnerability using Rogue-JNDI-NG to achieve remote code execution and root access in a lab environment.

Linux Copy Fail 0'Day

Practical validation of CVE-2026-31431 demonstrating real privilege escalation behavior in a controlled Linux environment.