Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 196 — ZoneDesk — SSRF via Health Monitor URL Check
Web · XESXOR
Medium3 min
CUSTOM
Lab 196 — ZoneDesk — SSRF via Health Monitor URL Check
Web · XESXOR
Medium3 min
CUSTOM
Lab 197 — BillForge — Authorization Bypass via HTTP Parameter Pollution
Web · XESXOR
Medium3 min
CUSTOM
Lab 197 — BillForge — Authorization Bypass via HTTP Parameter Pollution
Web · XESXOR
Medium3 min
CUSTOM
Lab 198 — PayrollSync — Broken Auth via GraphQL Introspection
Web · XESXOR
Easy3 min
CUSTOM
Lab 198 — PayrollSync — Broken Auth via GraphQL Introspection
Web · XESXOR
Easy3 min
CUSTOM
Lab 20 — BioLinkr — SSRF via Favicon Fetching to RCE
Web · XESXOR
Medium4 min
CUSTOM
Lab 20 — BioLinkr — SSRF via Favicon Fetching to RCE
Web · XESXOR
Medium4 min
CUSTOM
Lab 200 — PixelVibe — CSS Injection via Custom Profile Themes
Web · XESXOR
Medium5 min
CUSTOM
Lab 200 — PixelVibe — CSS Injection via Custom Profile Themes
Web · XESXOR
Medium6 min
CUSTOM
Lab 201 — HelpWave — Stored XSS via SVG Animation Event Handler Bypass
Web · XESXOR
Medium6 min
CUSTOM
Lab 201 — HelpWave — Stored XSS via SVG Animation Event Handler Bypass
Web · XESXOR
Medium6 min
CUSTOM
Lab 202 — WikiVault — AngularJS Client-Side Template Injection (XSS)
Web · XESXOR
Medium5 min
CUSTOM
Lab 202 — WikiVault — AngularJS Client-Side Template Injection (XSS)
Web · XESXOR
Medium5 min
CUSTOM
Lab 203 — PlanFlow — SQL Injection in Team Directory Search
Web · XESXOR
Medium3 min
CUSTOM
Lab 203 — PlanFlow — SQL Injection in Team Directory Search
Web · XESXOR
Medium3 min
CUSTOM
Lab 204 — PayLoom — SSRF via Webhook Testing to Cloud Metadata
Web · XESXOR
Easy3 min
CUSTOM
Lab 204 — PayLoom — SSRF via Webhook Testing to Cloud Metadata
Web · XESXOR
Easy3 min
CUSTOM
Lab 205 — DockForge — SSRF in Webhook Test Endpoint
Web · XESXOR
Medium4 min
CUSTOM
Lab 205 — DockForge — SSRF in Webhook Test Endpoint
Web · XESXOR
Medium4 min
CUSTOM
Lab 206 — PulseBoard — Password Reset Token Leakage via Referrer
Web · XESXOR
Medium4 min
CUSTOM
Lab 206 — PulseBoard — Password Reset Token Leakage via Referrer
Web · XESXOR
Medium4 min
CUSTOM
Lab 207 — FleetPulse — Reflected XSS via Base64 Bypass
Web · XESXOR
Medium4 min
CUSTOM
Lab 207 — FleetPulse — Reflected XSS via Base64 Bypass
Web · XESXOR
Medium4 min
CUSTOM
Lab 209 — BuildForge — Path Traversal in Static File Serving
Web · XESXOR
Easy2 min
CUSTOM
Lab 209 — BuildForge — Path Traversal in Static File Serving
Web · XESXOR
Easy2 min
CUSTOM
Lab 21 — ShelfSpace — Stored XSS in Product Description Editor
Web · XESXOR
Medium5 min
CUSTOM
Lab 21 — ShelfSpace — Stored XSS in Product Description Editor
Web · XESXOR
Medium5 min
CUSTOM
Lab 210 — RouteMesh — Broken Auth via Trusted Gateway Headers
Web · XESXOR
Easy3 min
CUSTOM
Lab 210 — RouteMesh — Broken Auth via Trusted Gateway Headers
Web · XESXOR
Easy3 min