Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
PORTSWIGGER
Routing-based SSRF
HTTP Host header attacks · XESXOR
N/A4 min
PORTSWIGGER
SameSite Lax bypass via method override
CSRF · XESXOR
N/A4 min
PORTSWIGGER
SameSite Strict bypass via client-side redirect
CSRF · XESXOR
N/A4 min
PORTSWIGGER
Server-side template injection in a sandboxed environment
SSTI · XESXOR
N/A2 min
PORTSWIGGER
Server-side template injection in an unknown language with a documented exploit
SSTI · XESXOR
N/A2 min
PORTSWIGGER
Server-side template injection using documentation
SSTI · XESXOR
N/A2 min
PORTSWIGGER
Server-side template injection with information disclosure via user-supplied objects
SSTI · XESXOR
N/A2 min
PORTSWIGGER
Source code disclosure via backup files
Information Disclosure · XESXOR
N/A3 min
PORTSWIGGER
SQL injection attack,listing the database contents on Oracle
SQL_injection · XESXOR
N/A3 min
PORTSWIGGER
SQL injection attack,listing-the database contents on non-Oracle databases
SQL_injection · XESXOR
N/A2 min
PORTSWIGGER
SQL injection attack,querying the database type and version on MySQL and Microsoft
SQL_injection · XESXOR
N/A2 min
PORTSWIGGER
SQL injection attack,querying the database type and version on Oracle
SQL_injection · XESXOR
N/A2 min
PORTSWIGGER
SQL injection UNION attack,determining the number of columns returned by the query
SQL_injection · XESXOR
N/A2 min
PORTSWIGGER
SQL injection UNION attack,finding a column containing text
SQL_injection · XESXOR
N/A2 min
PORTSWIGGER
SQL injection UNION attack,retrieving data from other tables
SQL_injection · XESXOR
N/A2 min
PORTSWIGGER
SQL injection UNION attack,retrieving multiple values in a single column
SQL_injection · XESXOR
N/A3 min
PORTSWIGGER
SQL injection vulnerability allowing login bypass
SQL_injection · XESXOR
N/A1 min
PORTSWIGGER
SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
SQL_injection · XESXOR
N/A1 min
PORTSWIGGER
SQL injection with filter bypass via XML encoding
SQL_injection · XESXOR
N/A4 min
PORTSWIGGER
SSRF via flawed request parsing
HTTP Host header attacks · XESXOR
N/A3 min
PORTSWIGGER
SSRF via OpenID dynamic client registration
Oauth · XESXOR
N/A1 min
PORTSWIGGER
SSRF with blacklist-based input filters
SSRF · XESXOR
N/A2 min
PORTSWIGGER
SSRF with filter bypass via open redirection vulnerability
SSRF · XESXOR
N/A3 min
PORTSWIGGER
SSRF with whitelist-based input filter
SSRF · XESXOR
N/A3 min
PORTSWIGGER
Stealing OAuth access tokens via an open redirect
Oauth · XESXOR
N/A5 min
PORTSWIGGER
Stored XSS into HTML context with nothing encoded
Cross Site Scripting · XESXOR
N/A1 min
PORTSWIGGER
Unprotected admin functionality
Access Control · XESXOR
N/A1 min
PORTSWIGGER
Unprotected admin functionality with unpredictable URL
Access Control · XESXOR
N/A1 min
PORTSWIGGER
URL-based access control can be circumvented
Access Control · XESXOR
N/A2 min
PORTSWIGGER
User ID controlled by request parameter
Access Control · XESXOR
N/A1 min