Hey everyone — 404Yeti here! Today we’re going through another Bug Forge challenge called Cheesy Does It. This one uses the same web app as previous challenges, but focuses on a different type of vulnerability. I really like how Bug Forge does this — instead of throwing everything at you at
Hey everyone 404yeti here and today we will go over a quick web app challenge from bug forge Step 1 make a user account Here we can see our financial dashboard Step 2 change the api endpoint to /admin While looking at the requests, I noticed the application was calling
Hey everyone! 404 yeti here! Today I wanted to talk about my time at Trace Labs and what I accomplished and what I learned! I worked for two teams, a training team and the software development team. I served them for about 8 months and I really learned alot. I
Hey everyone — Yeti here ❄️ Today we’re revisiting a previous Bug Forge web app challenge called Tanuki, but this time we’re digging a little deeper into the application to see what else we can uncover. This challenge highlights an important pentesting technique: Endpoint discovery Sometimes the most interesting functionality
Hey everyone — Yeti here, and yeah… I might be officially addicted to Bug Forge’s web app challenges now. ❄️ Today we’re tackling the Tanuki challenge — a deceptively simple flashcard app that hides a nice little vulnerability for us to uncover. Let’s dig in. Step 1: Create an account
webapp
Hey everyone — Yeti here I recently joined a daily web-app challenge platform called Bug Forge, and they drop fresh daily and weekly hacking challenges to keep your skills sharp. Naturally, I had to jump in. Today I’m sharing my walkthrough of the Café Club challenge — a fun exercise
Hey everyone — 404Yeti here, and today I wanted to write something a bit more personal. Not a walkthrough. Not a lab. Just the story behind a project that quietly grew into something real. That project is OSINTChallenges. And honestly… it started because something felt missing. The Gap I Saw in
Hey everyone — Yeti here, boots laced, goggles frosted, wrapping up the final Trace Labs challenge of 2025. This one is a beautiful mix of technical OSINT, visual analysis, and contextual reasoning — exactly the kind of investigation that mirrors real-world work. Let’s dig in. 🧊 Objective Suspicious network traffic was
Hey everyone — Yeti here, back on the ice for Trace Labs Challenge #13. This one is all about maritime OSINT, visual verification, and avoiding classic investigator traps. We’re given a single image of a vessel at sea and asked to identify: Objective * Vessel name * Flag state * Last reported port
Hey everyone — 404Yeti here, back with another Trace Labs OSINT challenge. This one is a classic metadata deception exercise, and it’s sneakier than it looks. We’re given a photo with EXIF data that almost makes sense… but something’s off. Our job is to identify the true intended
Hey everyone — 404Yeti here, back with Challenge #11 from Trace Labs. This one shifts gears from maps and landmarks into a critical OSINT skill: accurate translation and verification. This is where a lot of investigations go wrong — so we’re going to do it properly. Objective A recent tip included
Decoding a Location from a Cryptic Message Hey everyone — 404Yeti here, lacing up the snow boots for another Trace Labs challenge. ❄️ This one looks simple at first… but only if you recognize the trick. Objective Trace Labs is hosting a secret party, but instead of an address, they’ve left