Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
PORTSWIGGER
User ID controlled by request parameter with data leakage in redirect
Access Control · XESXOR
N/A2 min
PORTSWIGGER
User ID controlled by request parameter with password disclosure
Access Control · XESXOR
N/A2 min
PORTSWIGGER
User ID controlled by request parameter, with unpredictable user IDs
Access Control · XESXOR
N/A2 min
PORTSWIGGER
User role can be modified in user profile
Access Control · XESXOR
N/A2 min
PORTSWIGGER
User role controlled by request parameter
Access Control · XESXOR
N/A2 min
PORTSWIGGER
Username enumeration via account lock
Authentication · XESXOR
N/A3 min
PORTSWIGGER
Username enumeration via different responses
Authentication · XESXOR
N/A2 min
PORTSWIGGER
Username enumeration via response timing
Authentication · XESXOR
N/A2 min
PORTSWIGGER
Username enumeration via subtly different responses
Authentication · XESXOR
N/A2 min
PORTSWIGGER
Using application functionality to exploit insecure deserialization
Insecure Deserialization · XESXOR
N/A2 min
PORTSWIGGER
Visible error-based SQL injection
SQL_injection · XESXOR
N/A4 min
PORTSWIGGER
Weak isolation on dual-use endpoint
Business logic vulnerabilities · XESXOR
N/A4 min
PORTSWIGGER
Web shell upload via Content-Type restriction bypass
File_Upload · XESXOR
N/A2 min
PORTSWIGGER
Web shell upload via extension blacklist bypass
File_Upload · XESXOR
N/A4 min
PORTSWIGGER
Web shell upload via obfuscated file extension
File_Upload · XESXOR
N/A4 min
PORTSWIGGER
Web shell upload via path traversal
File_Upload · XESXOR
N/A4 min
PORTSWIGGER
Web shell upload via race condition
File_Upload · XESXOR
N/A5 min
HTB
02 - 20191020_web_kids20_websql_zerotwo
Web · D3v0o0Nu11
Easy2 min
HTB
0ld is g0ld
OSINT · D3v0o0Nu11
Easy1 min
HTB
0xDiablos
pwn · XESXOR
Easy3 min
HTB
0xDiablos
Pwn · D3v0o0Nu11
Easy4 min
HTB
110 - Retro Search (Ретро поиск) - duckerz CTF
Web · D3v0o0Nu11
Medium3 min
HTB
112 - Умный переулок (Smart Alley)
Web · D3v0o0Nu11
Medium2 min
HTB
143 - Личный блог
Web · D3v0o0Nu11
Medium5 min
HTB
155 - Генератор Мемов (Meme Generator)
Web · D3v0o0Nu11
Medium3 min
HTB
156 - Сломанный магазин (Broken Shop)
Web · D3v0o0Nu11
Easy4 min
HTB
PRO165 - Klimat Kontrol (Climate Control)
Web · D3v0o0Nu11
Hard5 min
HTB
PRO30 проблем админа (30 Admin Problems)
Web · D3v0o0Nu11
Hard7 min
HTB
4chat
Web · D3v0o0Nu11
Medium6 min
HTB
4llD4y
Web · D3v0o0Nu11
Medium6 min