Archives
- 21 Aug PortSwiggerlabs: Blind OS command injection with output redirection
- 21 Aug PortSwiggerlabs: Blind OS command injection with time delays
- 21 Aug PortSwiggerlabs: File path traversal, validation of file extension with null byte bypass
- 21 Aug PortSwiggerlabs: File path traversal, validation of start of path
- 21 Aug PortSwiggerlabs: File path traversal, traversal sequences stripped with superfluous URL-decode
- 21 Aug PortSwiggerlabs: OS command injection, simple case
- 18 Aug PortSwiggerlabs: File path traversal, traversal sequences stripped non-recursively
- 18 Aug PortSwiggerlabs: File path traversal, traversal sequences blocked with absolute path bypass
- 18 Aug PortSwiggerlabs: File path traversal, simple case
- 18 Aug PortSwiggerlabs: CORS vulnerability with trusted null origin
- 18 Aug PortSwiggerlabs: CORS vulnerability with basic origin reflection
- 06 Aug Hack The Box Armexis Walkthrough
- 05 Aug Hack The Box OnlyHacks Walkthrough
- 23 Jul PortSwiggerlabs: HTTP request smuggling, obfuscating the TE header
- 10 Jul Home Lab 1 : Isolate
- 07 Jul PortSwiggerlabs: H2.CL request smuggling
- 07 Jul PortSwiggerlabs: Response queue poisoning via H2.TE request smuggling
- 07 Jul PortSwiggerlabs: HTTP/2 request smuggling via CRLF injection
- 06 Jul PortSwiggerlabs: Exploiting HTTP request smuggling to deliver reflected XSS
- 06 Jul PortSwiggerlabs: Exploiting HTTP request smuggling to capture other users' requests
- 04 Jul PortSwiggerlabs: Exploiting HTTP request smuggling to reveal front-end request rewriting
- 03 Jul PortSwiggerlabs: Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability
- 01 Jul PortSwiggerlabs: Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vulnerability
- 01 Jul PortSwiggerlabs: HTTP request smuggling, confirming a TE.CL vulnerability via differential responses
- 30 Jun PortSwiggerlabs: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
- 29 Jun PortSwiggerlabs: Exploiting PHP deserialization with a pre-built gadget chain
- 29 Jun PortSwiggerlabs: Exploiting Ruby deserialization using a documented gadget chain
- 29 Jun PortSwiggerlabs: Exploiting Java deserialization with Apache Commons
- 29 Jun PortSwiggerlabs: Arbitrary object injection in PHP
- 28 Jun PortSwiggerlabs: Using application functionality to exploit insecure deserialization
- 27 Jun PortSwiggerlabs: Modifying serialized data types
- 26 Jun PortSwiggerlabs: Modifying serialized objects
- 26 Jun PortSwiggerlabs: Reflected XSS into attribute with angle brackets HTML-encoded
- 26 Jun PortSwiggerlabs: Stored XSS into anchor href attribute with double quotes HTML-encoded
- 25 Jun HackSmarter Past Walkthrough
- 25 Jun PortSwiggerlabs: DOM XSS in jQuery anchor href attribute sink using location.search source
- 25 Jun PortSwiggerlabs: DOM XSS in innerHTML sink using source location.search
- 25 Jun PortSwiggerlabs: DOM XSS in innerHTML sink using source location.search
- 25 Jun PortSwiggerlabs: DOM XSS in document.write sink using source location.search
- 25 Jun PortSwiggerlabs: Stored XSS into HTML context with nothing encoded
- 25 Jun PortSwiggerlabs: Reflected XSS into HTML context with nothing encoded
- 24 Jun PortSwiggerlabs: Blind SQL injection with time delays
- 24 Jun PortSwiggerlabs: Visible error-based SQL injection
- 24 Jun PortSwiggerlabs: SQL injection UNION attack, finding a column containing text
- 24 Jun PortSwiggerlabs: SQL injection UNION attack, retrieving multiple values in a single column
- 23 Jun PortSwiggerlabs: SQL injection UNION attack, retrieving data from other tables
- 23 Jun PortSwiggerlabs: SQL injection UNION attack, determining the number of columns returned by the query
- 23 Jun PortSwiggerlabs: SQL injection attack, listing the database contents on Oracle
- 23 Jun PortSwiggerlabs: SQL injection attack, listing the database contents on non-Oracle databases
- 23 Jun PortSwiggerlabs: SQL injection attack, querying the database type and version on MySQL and Microsoft
- 23 Jun PortSwiggerlabs: SQL injection attack, querying the database type and version on Oracle
- 23 Jun PortSwiggerlabs: SQL injection vulnerability allowing login bypass
- 23 Jun PortSwiggerlabs: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
- 18 Jun HackSmarter MidGarden2 Walkthrough
- 17 Jun Webverselabs Challenge Voucher Vault SQLi
- 17 Jun HackSmarter NorthBridge Systems Walkthrough
- 16 Jun Webverselabs Challenge Breach GraphQL
- 16 Jun Webverselabs Challenge Trace Control SQLi
- 16 Jun Webverselabs Challenge Skein Auth
- 16 Jun Webverselabs Challenge Schematic GraphQL
- 16 Jun Webverselabs Challenge Rill Reflected XSS
- 15 Jun Webverselabs Challenge FreightManifest SQLi
- 15 Jun Webverselabs Challenge Porchlight Reflected XSS
- 15 Jun Webverselabs Challenge Chorus Reflected XSS
- 15 Jun Webverselabs Salt Brook Pilates Challenge IDOR
- 15 Jun Webverselabs HeadCount Challenge IDOR
- 14 Jun Webverselabs Canal Cove Books Challenge XSS
- 14 Jun Webverselabs Banyan Challenge XSS
- 13 Jun Webverselabs Overrun Challenge IDOR
- 13 Jun Webverselabs Kismet Challenge XSS
- 13 Jun Webverselabs DeployWare Challenge Command Injection
- 13 Jun Webverselabs Quoted Challenge SSTI
- 13 Jun Webverselabs Folio Coffee Co Challenge SSTI
- 12 Jun Webverselabs Challenge Statuscraft SSRF
- 12 Jun Webverselabs Challenge BackAisle SQLi
- 12 Jun Webverselabs Exfil Challenge XXE
- 11 Jun Webverselabs Fieldnote Challenge XSS
- 11 Jun Webverselabs Toxin Challenge LFI
- 11 Jun Webverselabs Milltrace Challenge XSS
- 11 Jun Webverselabs ScanPortal Challenge Command Injection
- 10 Jun Webverselabs Challenge Tradesman SQLi
- 10 Jun Webverselabs Challenge Sandpiper Stationery XSS
- 09 Jun Webverselabs Parasite Challenge XXE
- 09 Jun Webverselabs Logcraft Challenge Command Injection
- 09 Jun Webverselabs Foundry Comics Challenge SSTI
- 08 Jun HackSmarter Odyssey Walkthrough
- 05 Jun HackSmarter Triathlon Walkthrough
- 05 Jun HackSmarter City Council Walkthrough
- 04 Jun HackSmarter Lumon Industries Walkthrough
- 01 Jun HackSmarter Anomaly Walkthrough
- 31 May HackSmarter Sysco Walkthrough
- 30 May HackSmarter StellarComms Walkthrough
- 29 May HackSmarter 404 Bank Walkthrough
- 29 May HackSmarter Welcome Walkthrough
- 29 May HackSmarter Arasaka Walkthrough
- 28 May HackSmarter ShadowGates Walkthrough
- 27 May HackSmarter MaritiniAD Walkthrough
- 21 May Webverselabs Palisade Challenge XSS
- 20 May Webverselabs BlockPixel Goods Challenge SSTI
- 20 May Webverselabs Crate & Sleeve Challenge XSS
- 20 May Webverselabs Netcheck Challenge Command Injection
- 20 May Webverselabs Crate & Sleeve Challenge XSS
- 20 May Webverselabs Foldmark Challenge XXE
- 19 May Webverselabs Parchive Challenge Command Injection
- 18 May Webverselabs Shadow Registrar SQLi
- 17 May HackSmarter Exception Walkthrough (Medium)
- 16 May Webverselabs Margins & Sons CPA Challenge XXE
- 16 May Webverselabs Ciphered Cart Challenge SQLi
- 15 May Webverselabs Mirage Challenge LFI
- 15 May Webverselabs Hollow Run Bedding Challenge File Upload
- 15 May Webverselabs Crosswind Challenge File Upload
- 15 May Webverselabs Traverse Challenge LFI
- 15 May Webverselabs Calliope Gallery Challenge File Upload
- 14 May Webverselabs Challenge Fermata Reflected XSS
- 14 May Webverselabs Challenge Sprocket-Line- Reflected XSS
- 13 May Webverselabs Challenge Spindrift Workspace Cookie
- 12 May Webverselabs Clearance Challenge GraphQL
- 12 May Webverselabs Gatekeeper Challenge SQLi
- 12 May Webverselabs Ember-Kettle Challlenge Reflected-XSS
- 10 May Webverselabs Challenge Rivet & Tack XSS
- 10 May HackSmarter Samurai Walkthrough
- 06 May Web Application Pentesting Methodology
- 28 Apr OSCP / CPTS Methodology
- 16 Mar INE eJPT Cheat Sheet | By Elmehdi LAASSIRI