Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
PORTSWIGGER
Brute-forcing a stay-logged-in cookie
Authentication · XESXOR
N/A3 min
PORTSWIGGER
Bypassing CSRF token validation
CSRF · XESXOR
N/A2 min
PORTSWIGGER
Bypassing rate limits via race conditions
Race Conditions · XESXOR
N/A1 min
PORTSWIGGER
Bypassing Referer-based CSRF defenses
CSRF · XESXOR
N/A1 min
PORTSWIGGER
Bypassing SameSite cookie restrictions
CSRF · XESXOR
N/A4 min
PORTSWIGGER
CORS vulnerability with basic origin reflection
CORS · XESXOR
N/A3 min
PORTSWIGGER
CORS vulnerability with internal network pivot attack
CORS · XESXOR
N/A5 min
PORTSWIGGER
CORS vulnerability with trusted insecure protocols
CORS · XESXOR
N/A3 min
PORTSWIGGER
CORS vulnerability with trusted null origin
CORS · XESXOR
N/A3 min
PORTSWIGGER
Cross-site WebSocket hijacking
WebSockets · XESXOR
N/A3 min
PORTSWIGGER
CSRF vulnerability with no defenses
CSRF · XESXOR
N/A2 min
PORTSWIGGER
CSRF where Referer validation depends on header being present
CSRF · XESXOR
N/A2 min
PORTSWIGGER
CSRF where token is duplicated in cookie
CSRF · XESXOR
N/A5 min
PORTSWIGGER
CSRF where token is not tied to user session
CSRF · XESXOR
N/A3 min
PORTSWIGGER
CSRF where token is tied to non-session cookie
CSRF · XESXOR
N/A6 min
PORTSWIGGER
CSRF where token validation depends on request method
CSRF · XESXOR
N/A3 min
PORTSWIGGER
CSRF where token validation depends on token being present
CSRF · XESXOR
N/A2 min
PORTSWIGGER
CSRF with broken Referer validation
CSRF · XESXOR
N/A4 min
PORTSWIGGER
Detecting NoSQL injection
NoSQL injection · XESXOR
N/A1 min
PORTSWIGGER
DOM-based cookie manipulation
DOM-based vulnerabilities · XESXOR
N/A1 min
PORTSWIGGER
DOM-based open redirection
DOM-based vulnerabilities · XESXOR
N/A3 min
PORTSWIGGER
Excessive trust in client-side controls
Business logic vulnerabilities · XESXOR
N/A2 min
PORTSWIGGER
Exploiting a mass assignment vulnerability
API testing · XESXOR
N/A3 min
PORTSWIGGER
Exploiting an API endpoint using documentation
API testing · XESXOR
N/A1 min
PORTSWIGGER
Exploiting blind XXE to exfiltrate data using a malicious external DTD
XXE · XESXOR
N/A4 min
PORTSWIGGER
Exploiting blind XXE to retrieve data via error messages
XXE · XESXOR
N/A3 min
PORTSWIGGER
Exploiting cache server normalization for web cache deception
Web Cache Deception · XESXOR
N/A3 min
PORTSWIGGER
Exploiting Java Deserialization with Apache Commons
Insecure Deserialization · XESXOR
N/A2 min
PORTSWIGGER
Exploiting NoSQL injection to extract data
NoSQL injection · XESXOR
N/A5 min
PORTSWIGGER
Exploiting NoSQL operator injection to bypass authentication
NoSQL injection · XESXOR
N/A3 min