https://blog.arok.win/2026-08-21 https://blog.arok.win/about.html2026-08-21 https://blog.arok.win/posts/ssrf-internal-probing/2026-05-31 https://blog.arok.win/posts/sensitive-info-leak-hunting/2026-05-16 https://blog.arok.win/posts/subdomain-takeover/2026-04-14 https://blog.arok.win/posts/sql-injection-waf-bypass/2026-02-26 https://blog.arok.win/posts/honeypot-detection/2026-02-18 https://blog.arok.win/posts/supply-chain-attack-surface/2026-01-23 https://blog.arok.win/posts/mobile-traffic-capture/2025-10-27 https://blog.arok.win/posts/api-security-checklist/2025-10-06 https://blog.arok.win/posts/zero-trust-least-privilege/2025-06-01 https://blog.arok.win/posts/access-log-forensics/2025-02-16 https://blog.arok.win/posts/idor-access-control-testing/2025-01-24 https://blog.arok.win/posts/red-team-opsec/2024-12-01 https://blog.arok.win/posts/xss-to-session-hijack/2024-10-23 https://blog.arok.win/posts/web-recon-methodology/2024-05-22 https://blog.arok.win/posts/jwt-security-bypass/2024-04-18 https://blog.arok.win/posts/ai-assisted-vuln-hunting/2024-03-17 https://blog.arok.win/posts/internal-port-forwarding/2024-02-29 https://blog.arok.win/posts/waf-fingerprint-identification/2023-12-28 https://blog.arok.win/posts/cloud-privilege-escalation/2023-10-18 https://blog.arok.win/posts/cors-misconfiguration/2023-08-25