Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 174 — CrowdPulse — Race Condition in Vote Submission
Web · XESXOR
Medium6 min
CUSTOM
Lab 174 — CrowdPulse — Race Condition in Vote Submission
Web · XESXOR
Medium6 min
CUSTOM
Lab 175 — ShopNova — Race Condition in Coupon Redemption
Web · XESXOR
Medium6 min
CUSTOM
Lab 175 — ShopNova — Race Condition in Coupon Redemption
Web · XESXOR
Medium6 min
CUSTOM
Lab 176 — TaskPilot — DOM-Based Open Redirect to XSS via javascript: Protocol
Web · XESXOR
Medium6 min
CUSTOM
Lab 176 — TaskPilot — DOM-Based Open Redirect to XSS via javascript: Protocol
Web · XESXOR
Medium6 min
CUSTOM
Lab 177 — CartNova — Race Condition in Coupon Redemption
Web · XESXOR
Medium6 min
CUSTOM
Lab 177 — CartNova — Race Condition in Coupon Redemption
Web · XESXOR
Medium6 min
CUSTOM
Lab 179 — VaultPay — Race Condition in Fund Transfer
Web · XESXOR
Medium6 min
CUSTOM
Lab 179 — VaultPay — Race Condition in Fund Transfer
Web · XESXOR
Medium6 min
CUSTOM
Lab 180 — FormForge — TOCTOU Race Condition in Form Creation
Web · XESXOR
Medium6 min
CUSTOM
Lab 180 — FormForge — TOCTOU Race Condition in Form Creation
Web · XESXOR
Medium6 min
CUSTOM
Lab 181 — PostFlow — Stored XSS via Cache Poisoning
Web · XESXOR
Medium5 min
CUSTOM
Lab 181 — PostFlow — Stored XSS via Cache Poisoning
Web · XESXOR
Medium5 min
CUSTOM
Lab 182 — PagePilot — XSS via Cache Poisoning
Web · XESXOR
Medium4 min
CUSTOM
Lab 182 — PagePilot — XSS via Cache Poisoning
Web · XESXOR
Medium4 min
CUSTOM
Lab 183 — ArticleFlow — Stored XSS via Fat GET Cache Poisoning
Web · XESXOR
Medium5 min
CUSTOM
Lab 183 — ArticleFlow — Stored XSS via Fat GET Cache Poisoning
Web · XESXOR
Medium5 min
CUSTOM
Lab 186 — DataPulse — CORS Origin Validation Bypass
Web · XESXOR
Easy3 min
CUSTOM
Lab 186 — DataPulse — CORS Origin Validation Bypass
Web · XESXOR
Easy3 min
CUSTOM
Lab 188 — PulseBoard — Host Header Injection in Password Reset
Web · XESXOR
Medium4 min
CUSTOM
Lab 188 — PulseBoard — Host Header Injection in Password Reset
Web · XESXOR
Medium3 min
CUSTOM
PROLab 19 — SecureAuth SSO - SAML Parser Differential
Web · XESXOR
Hard6 min
CUSTOM
PROLab 19 — SecureAuth SSO - SAML Parser Differential
Web · XESXOR
Hard6 min
CUSTOM
Lab 190 — ApiNexus — Proxy Access Control Bypass via URL Path Normalization
Web · XESXOR
Medium4 min
CUSTOM
Lab 190 — ApiNexus — Proxy Access Control Bypass via URL Path Normalization
Web · XESXOR
Medium3 min
CUSTOM
Lab 192 — StockFlow — Broken Authentication via CSRF Token Reuse
Web · XESXOR
Easy4 min
CUSTOM
Lab 192 — StockFlow — Broken Authentication via CSRF Token Reuse
Web · XESXOR
Easy4 min
CUSTOM
Lab 193 — ShopNova — Price Manipulation in Checkout API
Web · XESXOR
Easy3 min
CUSTOM
Lab 193 — ShopNova — Price Manipulation in Checkout API
Web · XESXOR
Easy3 min