Challenge 103
- PortSwiggerlabs: Blind OS command injection with output redirection
- PortSwiggerlabs: Blind OS command injection with time delays
- PortSwiggerlabs: File path traversal, validation of file extension with null byte bypass
- PortSwiggerlabs: File path traversal, validation of start of path
- PortSwiggerlabs: File path traversal, traversal sequences stripped with superfluous URL-decode
- PortSwiggerlabs: OS command injection, simple case
- PortSwiggerlabs: File path traversal, traversal sequences stripped non-recursively
- PortSwiggerlabs: File path traversal, traversal sequences blocked with absolute path bypass
- PortSwiggerlabs: File path traversal, simple case
- PortSwiggerlabs: CORS vulnerability with trusted null origin
- PortSwiggerlabs: CORS vulnerability with basic origin reflection
- Hack The Box Armexis Walkthrough
- Hack The Box OnlyHacks Walkthrough
- PortSwiggerlabs: HTTP request smuggling, obfuscating the TE header
- PortSwiggerlabs: H2.CL request smuggling
- PortSwiggerlabs: Response queue poisoning via H2.TE request smuggling
- PortSwiggerlabs: HTTP/2 request smuggling via CRLF injection
- PortSwiggerlabs: Exploiting HTTP request smuggling to deliver reflected XSS
- PortSwiggerlabs: Exploiting HTTP request smuggling to capture other users' requests
- PortSwiggerlabs: Exploiting HTTP request smuggling to reveal front-end request rewriting
- PortSwiggerlabs: Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability
- PortSwiggerlabs: Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vulnerability
- PortSwiggerlabs: HTTP request smuggling, confirming a TE.CL vulnerability via differential responses
- PortSwiggerlabs: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
- PortSwiggerlabs: Exploiting PHP deserialization with a pre-built gadget chain
- PortSwiggerlabs: Exploiting Ruby deserialization using a documented gadget chain
- PortSwiggerlabs: Exploiting Java deserialization with Apache Commons
- PortSwiggerlabs: Arbitrary object injection in PHP
- PortSwiggerlabs: Using application functionality to exploit insecure deserialization
- PortSwiggerlabs: Modifying serialized data types
- PortSwiggerlabs: Modifying serialized objects
- PortSwiggerlabs: Reflected XSS into attribute with angle brackets HTML-encoded
- PortSwiggerlabs: Stored XSS into anchor href attribute with double quotes HTML-encoded
- PortSwiggerlabs: DOM XSS in jQuery anchor href attribute sink using location.search source
- PortSwiggerlabs: DOM XSS in innerHTML sink using source location.search
- PortSwiggerlabs: DOM XSS in innerHTML sink using source location.search
- PortSwiggerlabs: DOM XSS in document.write sink using source location.search
- PortSwiggerlabs: Stored XSS into HTML context with nothing encoded
- PortSwiggerlabs: Reflected XSS into HTML context with nothing encoded
- PortSwiggerlabs: Blind SQL injection with time delays
- PortSwiggerlabs: Visible error-based SQL injection
- PortSwiggerlabs: SQL injection UNION attack, finding a column containing text
- PortSwiggerlabs: SQL injection UNION attack, retrieving multiple values in a single column
- PortSwiggerlabs: SQL injection UNION attack, retrieving data from other tables
- PortSwiggerlabs: SQL injection UNION attack, determining the number of columns returned by the query
- PortSwiggerlabs: SQL injection attack, listing the database contents on Oracle
- PortSwiggerlabs: SQL injection attack, listing the database contents on non-Oracle databases
- PortSwiggerlabs: SQL injection attack, querying the database type and version on MySQL and Microsoft
- PortSwiggerlabs: SQL injection attack, querying the database type and version on Oracle
- PortSwiggerlabs: SQL injection vulnerability allowing login bypass
- PortSwiggerlabs: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
- Webverselabs Challenge Voucher Vault SQLi
- Webverselabs Challenge Breach GraphQL
- Webverselabs Challenge Trace Control SQLi
- Webverselabs Challenge Skein Auth
- Webverselabs Challenge Schematic GraphQL
- Webverselabs Challenge Rill Reflected XSS
- Webverselabs Challenge FreightManifest SQLi
- Webverselabs Challenge Porchlight Reflected XSS
- Webverselabs Challenge Chorus Reflected XSS
- Webverselabs Salt Brook Pilates Challenge IDOR
- Webverselabs HeadCount Challenge IDOR
- Webverselabs Canal Cove Books Challenge XSS
- Webverselabs Banyan Challenge XSS
- Webverselabs Overrun Challenge IDOR
- Webverselabs Kismet Challenge XSS
- Webverselabs DeployWare Challenge Command Injection
- Webverselabs Quoted Challenge SSTI
- Webverselabs Folio Coffee Co Challenge SSTI
- Webverselabs Challenge Statuscraft SSRF
- Webverselabs Challenge BackAisle SQLi
- Webverselabs Exfil Challenge XXE
- Webverselabs Fieldnote Challenge XSS
- Webverselabs Toxin Challenge LFI
- Webverselabs Milltrace Challenge XSS
- Webverselabs ScanPortal Challenge Command Injection
- Webverselabs Challenge Tradesman SQLi
- Webverselabs Challenge Sandpiper Stationery XSS
- Webverselabs Parasite Challenge XXE
- Webverselabs Logcraft Challenge Command Injection
- Webverselabs Foundry Comics Challenge SSTI
- Webverselabs Palisade Challenge XSS
- Webverselabs BlockPixel Goods Challenge SSTI
- Webverselabs Crate & Sleeve Challenge XSS
- Webverselabs Netcheck Challenge Command Injection
- Webverselabs Crate & Sleeve Challenge XSS
- Webverselabs Foldmark Challenge XXE
- Webverselabs Parchive Challenge Command Injection
- Webverselabs Shadow Registrar SQLi
- Webverselabs Margins & Sons CPA Challenge XXE
- Webverselabs Ciphered Cart Challenge SQLi
- Webverselabs Mirage Challenge LFI
- Webverselabs Hollow Run Bedding Challenge File Upload
- Webverselabs Crosswind Challenge File Upload
- Webverselabs Traverse Challenge LFI
- Webverselabs Calliope Gallery Challenge File Upload
- Webverselabs Challenge Fermata Reflected XSS
- Webverselabs Challenge Sprocket-Line- Reflected XSS
- Webverselabs Challenge Spindrift Workspace Cookie
- Webverselabs Clearance Challenge GraphQL
- Webverselabs Gatekeeper Challenge SQLi
- Webverselabs Ember-Kettle Challlenge Reflected-XSS
- Webverselabs Challenge Rivet & Tack XSS