DEV Community

Amartya Jha profile picture

Amartya Jha

CodeAnt AI is an AI-powered software engineering platform that helps developers and engineering teams build, review, secure, and maintain high-quality code.

Joined Joined on  Personal website https://codeant.ai/in
Why Your $6,500 Penetration Test Will Cost You More Than the $47,000 One

Why Your $6,500 Penetration Test Will Cost You More Than the $47,000 One

Comments
9 min read

Want to connect with Amartya Jha?

Create an account to connect with Amartya Jha. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
External Penetration Testing in 2026: A Technical Methodology, Tool Stack, and Attack Surface Guide

External Penetration Testing in 2026: A Technical Methodology, Tool Stack, and Attack Surface Guide

Comments
16 min read
IDOR: The Vulnerability Class Your Scanners Will Never Find

IDOR: The Vulnerability Class Your Scanners Will Never Find

Comments
9 min read
Black Box vs White Box vs Gray Box Pentesting: Picking the Right One (Most Teams Don't)

Black Box vs White Box vs Gray Box Pentesting: Picking the Right One (Most Teams Don't)

Comments
8 min read
Red Team Authorization: Solving the Paradox of Testing People Who Can't Know They're Being Tested

Red Team Authorization: Solving the Paradox of Testing People Who Can't Know They're Being Tested

Comments
6 min read
SOC 2 Penetration Testing: What Auditors Actually Check For (And Where Most Programs Fail)

SOC 2 Penetration Testing: What Auditors Actually Check For (And Where Most Programs Fail)

Comments
10 min read
The Deployment Velocity Gap: Why Annual Pentesting Can't Keep Up With Modern SaaS

The Deployment Velocity Gap: Why Annual Pentesting Can't Keep Up With Modern SaaS

Comments
7 min read
Dissecting FOIS: The Log4j2 Filter That Only Does Half Its Job

Dissecting FOIS: The Log4j2 Filter That Only Does Half Its Job

Comments
7 min read
How a GitHub Triage Role Hijacked an Already-Authorized Claude Code Action Run

How a GitHub Triage Role Hijacked an Already-Authorized Claude Code Action Run

Comments
8 min read
Escaping Claude Code's Sandbox: A TOCTOU Bug That Let Repo Code Overwrite Host Files

Escaping Claude Code's Sandbox: A TOCTOU Bug That Let Repo Code Overwrite Host Files

Comments
8 min read
CVE-2026-71511 · Read a member's card, receive their password hash

CVE-2026-71511 · Read a member's card, receive their password hash

Comments
4 min read
CVE-2026-71510 · Ask enough yes/no questions and you know everyone's salary

CVE-2026-71510 · Ask enough yes/no questions and you know everyone's salary

Comments
5 min read
CVE-2026-71509 · Approve your own expenses — and your whole team's

CVE-2026-71509 · Approve your own expenses — and your whole team's

Comments
4 min read
CVE-2026-71508 · Set your own salary — and the receipt hides it

CVE-2026-71508 · Set your own salary — and the receipt hides it

Comments
4 min read
CVE-2026-71507 · Change one number, and the payroll run pays you

CVE-2026-71507 · Change one number, and the payroll run pays you

Comments
5 min read
CVE-2026-71506 · The wrong key on the lock

CVE-2026-71506 · The wrong key on the lock

Comments
4 min read
CVE-2026-71505 · The read desk checks your ID. The write desk doesn't.

CVE-2026-71505 · The read desk checks your ID. The write desk doesn't.

Comments
4 min read
CVE-2026-71504 · The membership desk that could reset the admin's password

CVE-2026-71504 · The membership desk that could reset the admin's password

Comments
5 min read
CVE-2026-71503 · One link, opened once, mints a second admin

CVE-2026-71503 · One link, opened once, mints a second admin

Comments
6 min read
The Back-Office Break-In: Nine Dolibarr Findings

The Back-Office Break-In: Nine Dolibarr Findings

Comments
4 min read
Four Letters Were All It Took to Break This Archive Extractor

Four Letters Were All It Took to Break This Archive Extractor

Comments
6 min read
Root Cause Analysis: Glob-Pattern Confusion in Claude Code's macOS Sandbox (CVSS 7.7)"

Root Cause Analysis: Glob-Pattern Confusion in Claude Code's macOS Sandbox (CVSS 7.7)"

Comments
5 min read
loading...