Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 267 — RestForge — SQL Injection in Dynamic Data Endpoint
Web · XESXOR
Medium4 min
CUSTOM
Lab 267 — RestForge — SQL Injection in Dynamic Data Endpoint
Web · XESXOR
Medium4 min
CUSTOM
Lab 27 — AdReach — CSRF + IDOR Account Takeover via Profile Update
Web · XESXOR
Easy5 min
CUSTOM
Lab 27 — AdReach — CSRF + IDOR Account Takeover via Profile Update
Web · XESXOR
Easy5 min
CUSTOM
Lab 271 — TeamPulse — Stored XSS via HTML File Upload
Web · XESXOR
Medium4 min
CUSTOM
Lab 271 — TeamPulse — Stored XSS via HTML File Upload
Web · XESXOR
Medium4 min
CUSTOM
Lab 272 — SwiftMart — Race Condition in Promo Code Redemption
Web · XESXOR
Medium6 min
CUSTOM
Lab 272 — SwiftMart — Race Condition in Promo Code Redemption
Web · XESXOR
Medium6 min
CUSTOM
Lab 273 — AuthForge — SSRF via OAuth Dynamic Client Registration
Web · XESXOR
Easy4 min
CUSTOM
Lab 273 — AuthForge — SSRF via OAuth Dynamic Client Registration
Web · XESXOR
Easy4 min
CUSTOM
Lab 274 — CloudPulse — SAML XML Signature Wrapping via Dual-Parser Inconsistency
Web · XESXOR
Medium5 min
CUSTOM
Lab 274 — CloudPulse — SAML XML Signature Wrapping via Dual-Parser Inconsistency
Web · XESXOR
Medium4 min
CUSTOM
Lab 275 — GatewayPulse — Proxy ACL Bypass via Path Case Normalization
Web · XESXOR
Medium3 min
CUSTOM
Lab 275 — GatewayPulse — Proxy ACL Bypass via Path Case Normalization
Web · XESXOR
Medium3 min
CUSTOM
PROLab 277 — InsightPulse — Reflected XSS + Cookie Sandwich (RFC2109 HttpOnly Bypass)
Web · XESXOR
Hard6 min
CUSTOM
PROLab 277 — InsightPulse — Reflected XSS + Cookie Sandwich (RFC2109 HttpOnly Bypass)
Web · XESXOR
Hard6 min
CUSTOM
Lab 279 — DeskFlow — CSS Injection Exfiltration via Attribute Selectors
Web · XESXOR
Medium6 min
CUSTOM
Lab 279 — DeskFlow — CSS Injection Exfiltration via Attribute Selectors
Web · XESXOR
Medium6 min
CUSTOM
Lab 280 — InkWell — CSP Bypass via JPEG Polyglot XSS
Web · XESXOR
Medium6 min
CUSTOM
Lab 280 — InkWell — CSP Bypass via JPEG Polyglot XSS
Web · XESXOR
Medium6 min
CUSTOM
Lab 281 — PipeForge — Prototype Pollution to RCE via Build Worker
Web · XESXOR
Medium6 min
CUSTOM
Lab 281 — PipeForge — Prototype Pollution to RCE via Build Worker
Web · XESXOR
Medium6 min
CUSTOM
Lab 282 — StreamForge — SSRF via Webhook Test Bypasses Proxy Auth
Web · XESXOR
Medium4 min
CUSTOM
Lab 282 — StreamForge — SSRF via Webhook Test Bypasses Proxy Auth
Web · XESXOR
Medium4 min
CUSTOM
Lab 283 — PulseMetrics — XSS via HTTP Response Splitting (CRLF Injection)
Web · XESXOR
Medium4 min
CUSTOM
Lab 283 — PulseMetrics — XSS via HTTP Response Splitting (CRLF Injection)
Web · XESXOR
Medium4 min
CUSTOM
Lab 284 — KnowledgeForge — Stored XSS via DOM Clobbering + CSP Bypass
Web · XESXOR
Medium4 min
CUSTOM
Lab 284 — KnowledgeForge — Stored XSS via DOM Clobbering + CSP Bypass
Web · XESXOR
Medium4 min
CUSTOM
PROLab 285 — FlowBoard — SAML SSO Dual-Parser Authentication Bypass
Web · XESXOR
Hard7 min
CUSTOM
PROLab 285 — FlowBoard — SAML SSO Dual-Parser Authentication Bypass
Web · XESXOR
Hard7 min