Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 119 — PulseBoard — Predictable UUID v1 Password Reset Tokens
Web · XESXOR
Medium6 min
CUSTOM
Lab 119 — PulseBoard — Predictable UUID v1 Password Reset Tokens
Web · XESXOR
Medium6 min
CUSTOM
Lab 12 — NewsGrid — JWT Algorithm Confusion
Web · XESXOR
Medium4 min
CUSTOM
Lab 12 — NewsGrid — JWT Algorithm Confusion
Web · XESXOR
Medium4 min
CUSTOM
Lab 120 — InfraPulse
Web · XESXOR
Easy3 min
CUSTOM
Lab 120 — InfraPulse
Web · XESXOR
Easy3 min
CUSTOM
Lab 121 — OrgPilot — GraphQL Broken Access Control
Web · XESXOR
Easy4 min
CUSTOM
Lab 121 — OrgPilot — GraphQL Broken Access Control
Web · XESXOR
Easy4 min
CUSTOM
Lab 122 — BuildStream — RCE via Expression Sandbox Escape
Web · XESXOR
Medium4 min
CUSTOM
Lab 122 — BuildStream — RCE via Expression Sandbox Escape
Web · XESXOR
Medium4 min
CUSTOM
Lab 124 — SprintForge — Insecure Deserialization via Cookie Session + Debug Key Leak
Web · XESXOR
Medium5 min
CUSTOM
Lab 124 — SprintForge — Insecure Deserialization via Cookie Session + Debug Key Leak
Web · XESXOR
Medium5 min
CUSTOM
Lab 126 — AssetForge — RCE via Ghostscript Pipe Device Bypass (CVE-2023-36664)
Web · XESXOR
Medium4 min
CUSTOM
Lab 126 — AssetForge — RCE via Ghostscript Pipe Device Bypass (CVE-2023-36664)
Web · XESXOR
Medium4 min
CUSTOM
Lab 127 — PulseMetric — Insecure Deserialization via Pickle in Agent Report API
Web · XESXOR
Medium4 min
CUSTOM
Lab 127 — PulseMetric — Insecure Deserialization via Pickle in Agent Report API
Web · XESXOR
Medium4 min
CUSTOM
Lab 129 — ReqForge — RCE via VM Sandbox Escape
Web · XESXOR
Medium5 min
CUSTOM
Lab 129 — ReqForge — RCE via VM Sandbox Escape
Web · XESXOR
Medium5 min
CUSTOM
Lab 13 — WebForge — Insecure Deserialization in Config Import
Web · XESXOR
Medium3 min
CUSTOM
Lab 13 — WebForge — Insecure Deserialization in Config Import
Web · XESXOR
Medium3 min
CUSTOM
Lab 130 — LearnPulse — SSTI in Signature Template Engine
Web · XESXOR
Easy3 min
CUSTOM
Lab 130 — LearnPulse — SSTI in Signature Template Engine
Web · XESXOR
Easy3 min
CUSTOM
Lab 133 — MailForge — SSTI via Handlebars Template Preview
Web · XESXOR
Medium4 min
CUSTOM
Lab 133 — MailForge — SSTI via Handlebars Template Preview
Web · XESXOR
Medium4 min
CUSTOM
Lab 134 — DocForge — FreeMarker SSTI Sandbox Escape via ?api Built-in
Web · XESXOR
Medium4 min
CUSTOM
Lab 134 — DocForge — FreeMarker SSTI Sandbox Escape via ?api Built-in
Web · XESXOR
Medium4 min
CUSTOM
Lab 135 — PageCraft — SSTI in CMS Page Editor
Web · XESXOR
Medium3 min
CUSTOM
Lab 135 — PageCraft — SSTI in CMS Page Editor
Web · XESXOR
Medium3 min
CUSTOM
Lab 138 — PulseGuard — SpEL Injection via Whitelabel Error Page
Web · XESXOR
Medium5 min
CUSTOM
Lab 138 — PulseGuard — SpEL Injection via Whitelabel Error Page
Web · XESXOR
Medium5 min