Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 245 — MetriView — Reflected XSS via Open Redirect Chain
Web · XESXOR
Medium7 min
CUSTOM
Lab 245 — MetriView — Reflected XSS via Open Redirect Chain
Web · XESXOR
Medium6 min
CUSTOM
Lab 247 — PulseGuard — SSTI in Webhook Notification Templates
Web · XESXOR
Medium3 min
CUSTOM
Lab 247 — PulseGuard — SSTI in Webhook Notification Templates
Web · XESXOR
Medium3 min
CUSTOM
Lab 248 — PulseBoard — Next.js Middleware Authorization Bypass
Web · XESXOR
Medium5 min
CUSTOM
Lab 248 — PulseBoard — Next.js Middleware Authorization Bypass
Web · XESXOR
Medium5 min
CUSTOM
Lab 25 — DocuForge — RCE via Dompdf Font Cache Exploitation
Web · XESXOR
Medium5 min
CUSTOM
Lab 25 — DocuForge — RCE via Dompdf Font Cache Exploitation
Web · XESXOR
Medium4 min
CUSTOM
Lab 251 — PulseBoard — IDOR via Unauthenticated GraphQL User Profile Query
Web · XESXOR
Easy3 min
CUSTOM
Lab 251 — PulseBoard — IDOR via Unauthenticated GraphQL User Profile Query
Web · XESXOR
Easy3 min
CUSTOM
Lab 252 — BuildForge — RCE via npm Lifecycle Script Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 252 — BuildForge — RCE via npm Lifecycle Script Injection
Web · XESXOR
Medium4 min
CUSTOM
Lab 253 — InfraCore — Path Traversal to RCE via Groovy Script Console
Web · XESXOR
Medium4 min
CUSTOM
Lab 253 — InfraCore — Path Traversal to RCE via Groovy Script Console
Web · XESXOR
Medium4 min
CUSTOM
Lab 254 — PageForge — ZIP Upload File Type Bypass to RCE
Web · XESXOR
Medium5 min
CUSTOM
Lab 254 — PageForge — ZIP Upload File Type Bypass to RCE
Web · XESXOR
Medium5 min
CUSTOM
Lab 256 — UptimeRadar — SSRF via URL Health Check
Web · XESXOR
Easy4 min
CUSTOM
Lab 256 — UptimeRadar — SSRF via URL Health Check
Web · XESXOR
Easy4 min
CUSTOM
Lab 258 — FormHive — Content-Type Confusion to JWT Forgery to Sandbox Escape
Web · XESXOR
Medium5 min
CUSTOM
Lab 258 — FormHive — Content-Type Confusion to JWT Forgery to Sandbox Escape
Web · XESXOR
Medium5 min
CUSTOM
Lab 259 — TalentBridge — IDOR in Employee Profile Endpoints
Web · XESXOR
Easy1 min
CUSTOM
Lab 259 — TalentBridge — IDOR in Employee Profile Endpoints
Web · XESXOR
Easy1 min
CUSTOM
Lab 260 — VaultDrop — Path Traversal via Buffer.prototype.utf8Write Monkey-Patching
Web · XESXOR
Medium5 min
CUSTOM
Lab 260 — VaultDrop — Path Traversal via Buffer.prototype.utf8Write Monkey-Patching
Web · XESXOR
Medium5 min
CUSTOM
Lab 262 — PulseBoard — JWT Signature Bypass via Google Sign-In
Web · XESXOR
Medium3 min
CUSTOM
Lab 262 — PulseBoard — JWT Signature Bypass via Google Sign-In
Web · XESXOR
Medium3 min
CUSTOM
Lab 264 — DeployForge — Path Traversal to RCE via Admin Diagnostics Console
Web · XESXOR
Medium4 min
CUSTOM
Lab 264 — DeployForge — Path Traversal to RCE via Admin Diagnostics Console
Web · XESXOR
Medium4 min
CUSTOM
PROLab 266 — DocuVault — PATH_TRAVERSAL
Web · XESXOR
Hard6 min
CUSTOM
PROLab 266 — DocuVault — PATH_TRAVERSAL
Web · XESXOR
Hard6 min