Deep-dive security research, custom web dev tutorials, and free developer utilities by Melalew Mengistu.
Hands-on guides and research across web security, full-stack engineering, and Linux systems.
A practical breakdown of SQL Injection attacks — how they break queries, why mobile apps are just as vulnerable, and the exact patterns I use to lock down a database. From prepared statements to ORMs to error suppression.
Written by Melalew Mengistu — August 9, 2026
How I learned to think about cross-site scripting vulnerabilities in single-page applications and write safer React code. A deep dive into dangerouslySetInnerHTML risks, DOM sinks, and Content Security Policy configuration.
Written by Melalew Mengistu — August 10, 2026
A practical breakdown of how I evaluate Linux distributions for security work and daily development. Covers Kali, Ubuntu, Arch, and Parrot OS — comparing package management, kernel hardening, and what each is actually built for.
Written by Melalew Mengistu — August 9, 2026
The real lessons from running bug bounty programs — how scope works, what separates a duplicate from a valid report, how triage teams think, and why most beginners burn out before finding their first payout.
Written by Melalew Mengistu — August 10, 2026
Long-form cybersecurity research, annotated code tutorials, and browser-based developer utilities with full documentation.
In-depth technical writeups and code tutorials covering cybersecurity, Linux hardening, and modern web development.
Explore ArticlesCustom web utilities, security tools, and open-source projects built by Melalew Mengistu.
Explore ProjectsDownloadable roadmaps, reference cheat sheets, and practical reference guides for developers.
Explore ResourcesBrowser-based developer utilities with integrated technical documentation covering regex patterns, unit conversion formulas, and password entropy analysis.
Build, test, and debug regular expressions with real-time matching, syntax highlighting, and instant regex pattern analysis. Each tool page includes 800+ words of technical documentation on regex flags, character classes, and real-world use cases.
Try ToolConvert data storage units, network bandwidth, physical measurements, and computing metrics with high-precision accuracy. The tool page includes detailed documentation on conversion formulas, SI vs binary prefixes, and practical engineering examples.
Try ToolEvaluate credential entropy, check password strength against common vulnerability databases, and receive action-oriented security tips. The tool page includes in-depth documentation on entropy calculation methods, brute-force attack timelines, and NIST password guideline comparisons.
Try ToolThe honest version — not the polished one.
MELEX IT was built by Melalew Mengistu out of a simple frustration: most cybersecurity and web engineering content online is either too shallow to be useful or too academic to be applied. The guides skip the part where things break. The tutorials work only in the demo. The explanations assume you already know the hard part.
Everything published here — the articles, the tools, the cheat sheets — comes from real learning: CTF challenges, bug bounty hunts, live audits, and production codebases. The writing is first-person because that's what it is. Not a corporate content team. One engineer, documenting what actually works and what doesn't.
If you're learning web security, building your first secure application, or just trying to understand why a vulnerability exists instead of just patching it, this platform was made for you.