Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 102 — HireScreen — Indirect Prompt Injection via Resume Description
Web · XESXOR
Medium6 min
CUSTOM
Lab 102 — HireScreen — Indirect Prompt Injection via Resume Description
Web · XESXOR
Medium6 min
CUSTOM
Lab 103 — DataPilot — AI SQL Injection via Natural Language Query
Web · XESXOR
Medium5 min
CUSTOM
Lab 103 — DataPilot — AI SQL Injection via Natural Language Query
Web · XESXOR
Medium5 min
CUSTOM
Lab 104 — CloudOps Copilot — AI SSRF via Infrastructure Tool Abuse
Web · XESXOR
Medium5 min
CUSTOM
Lab 104 — CloudOps Copilot — AI SSRF via Infrastructure Tool Abuse
Web · XESXOR
Medium5 min
CUSTOM
Lab 105 — WriteFlow — Indirect Prompt Injection via Document Analysis
Web · XESXOR
Medium4 min
CUSTOM
Lab 105 — WriteFlow — Indirect Prompt Injection via Document Analysis
Web · XESXOR
Medium4 min
CUSTOM
Lab 106 — ApproveBot — AI Privilege Escalation via Context Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 106 — ApproveBot — AI Privilege Escalation via Context Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 107 — TicketGenius — AI Output Filter Bypass via Encoding
Web · XESXOR
Medium5 min
CUSTOM
Lab 107 — TicketGenius — AI Output Filter Bypass via Encoding
Web · XESXOR
Medium5 min
CUSTOM
Lab 108 — CostPilot — IDOR via Deprecated v1 API Endpoint
Web · XESXOR
Easy4 min
CUSTOM
Lab 108 — CostPilot — IDOR via Deprecated v1 API Endpoint
Web · XESXOR
Easy4 min
CUSTOM
Lab 109 — TaskForge — IDOR in Account Settings API
Web · XESXOR
Easy1 min
CUSTOM
Lab 109 — TaskForge — IDOR in Account Settings API
Web · XESXOR
Easy1 min
CUSTOM
Lab 110 — FlowDesk — Mass Assignment Privilege Escalation
Web · XESXOR
Easy3 min
CUSTOM
Lab 110 — FlowDesk — Mass Assignment Privilege Escalation
Web · XESXOR
Easy2 min
CUSTOM
Lab 112 — MetricFlow — IDOR in Usage Analytics API
Web · XESXOR
Easy3 min
CUSTOM
Lab 112 — MetricFlow — IDOR in Usage Analytics API
Web · XESXOR
Easy2 min
CUSTOM
Lab 113 — CloudNest
Web · XESXOR
Medium2 min
CUSTOM
Lab 113 — CloudNest
Web · XESXOR
Medium2 min
CUSTOM
Lab 114 — APIForge — JWT JKU Header Injection for Privilege Escalation
Web · XESXOR
Medium5 min
CUSTOM
Lab 114 — APIForge — JWT JKU Header Injection for Privilege Escalation
Web · XESXOR
Medium5 min
CUSTOM
Lab 115 — PulseChat — IDOR in Attachment Download
Web · XESXOR
Easy3 min
CUSTOM
Lab 115 — PulseChat — IDOR in Attachment Download
Web · XESXOR
Easy3 min
CUSTOM
Lab 116 — InsightForge — IDOR via Undocumented Internal API
Web · XESXOR
Medium4 min
CUSTOM
Lab 116 — InsightForge — IDOR via Undocumented Internal API
Web · XESXOR
Medium4 min
CUSTOM
Lab 118 — FlowDesk — Predictable Password Reset Token
Web · XESXOR
Medium4 min
CUSTOM
Lab 118 — FlowDesk — Predictable Password Reset Token
Web · XESXOR
Medium4 min