Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 211 — CloudPulse
Web · XESXOR
Medium4 min
CUSTOM
Lab 211 — CloudPulse
Web · XESXOR
Medium4 min
CUSTOM
Lab 213 — PingCraft — SSTI via Template Preview Rendering
Web · XESXOR
Medium3 min
CUSTOM
Lab 213 — PingCraft — SSTI via Template Preview Rendering
Web · XESXOR
Medium3 min
CUSTOM
Lab 215 — NestVault — 2FA Bypass via Incomplete Session Verification
Web · XESXOR
Medium2 min
CUSTOM
Lab 215 — NestVault — 2FA Bypass via Incomplete Session Verification
Web · XESXOR
Medium3 min
CUSTOM
Lab 216 — ShelfWave — IDOR Price Manipulation in Checkout
Web · XESXOR
Easy2 min
CUSTOM
Lab 216 — ShelfWave — IDOR Price Manipulation in Checkout
Web · XESXOR
Easy1 min
CUSTOM
Lab 217 — PlanForge — Broken Authorization in Subscription Upgrade
Web · XESXOR
Easy3 min
CUSTOM
Lab 217 — PlanForge — Broken Authorization in Subscription Upgrade
Web · XESXOR
Easy3 min
CUSTOM
Lab 218 — InsightDash — Web Cache Deception via URL Parser Discrepancy
Web · XESXOR
Medium5 min
CUSTOM
Lab 218 — InsightDash — Web Cache Deception via URL Parser Discrepancy
Web · XESXOR
Medium5 min
CUSTOM
Lab 22 — GrubFleet — IDOR in GraphQL Store Management API
Web · XESXOR
Medium2 min
CUSTOM
Lab 22 — GrubFleet — IDOR in GraphQL Store Management API
Web · XESXOR
Medium2 min
CUSTOM
Lab 220 — RouteForge — TE.TE HTTP Request Smuggling via Proxy Header Parsing
Web · XESXOR
Medium8 min
CUSTOM
Lab 220 — RouteForge — TE.TE HTTP Request Smuggling via Proxy Header Parsing
Web · XESXOR
Medium8 min
CUSTOM
Lab 222 — DeployForge — CL.0 HTTP Request Smuggling via Health Check Endpoint
Web · XESXOR
Medium6 min
CUSTOM
Lab 222 — DeployForge — CL.0 HTTP Request Smuggling via Health Check Endpoint
Web · XESXOR
Medium5 min
CUSTOM
Lab 223 — RelayDock — CORS Misconfiguration in Internal Config API
Web · XESXOR
Medium6 min
CUSTOM
Lab 223 — RelayDock — CORS Misconfiguration in Internal Config API
Web · XESXOR
Medium6 min
CUSTOM
Lab 224 — ModelVault — Path Traversal via OCI Manifest Digest
Web · XESXOR
Medium4 min
CUSTOM
Lab 224 — ModelVault — Path Traversal via OCI Manifest Digest
Web · XESXOR
Medium4 min
CUSTOM
Lab 225 — MailPulse — SSTI in Campaign Template Preview
Web · XESXOR
Easy4 min
CUSTOM
Lab 225 — MailPulse — SSTI in Campaign Template Preview
Web · XESXOR
Easy4 min
CUSTOM
Lab 226 — LiveDesk — SQL Injection via WebSocket Message Search
Web · XESXOR
Medium4 min
CUSTOM
Lab 226 — LiveDesk — SQL Injection via WebSocket Message Search
Web · XESXOR
Medium4 min
CUSTOM
Lab 227 — InsightPulse — Flight Protocol Deserialization to RCE
Web · XESXOR
Medium6 min
CUSTOM
Lab 227 — InsightPulse — Flight Protocol Deserialization to RCE
Web · XESXOR
Medium6 min
CUSTOM
Lab 228 — GridPulse
Web · XESXOR
Medium4 min
CUSTOM
Lab 228 — GridPulse
Web · XESXOR
Medium4 min