Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 287 — InsightFlow — SSRF via Host Header Routing and IP Spoofing
Web · XESXOR
Medium4 min
CUSTOM
Lab 287 — InsightFlow — SSRF via Host Header Routing and IP Spoofing
Web · XESXOR
Medium4 min
CUSTOM
Lab 288 — VaultPay — 2FA Bypass via Pre-Authentication JWT
Web · XESXOR
Medium2 min
CUSTOM
Lab 288 — VaultPay — 2FA Bypass via Pre-Authentication JWT
Web · XESXOR
Medium2 min
CUSTOM
Lab 29 — PackForge — Path Traversal to RCE via Template Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 29 — PackForge — Path Traversal to RCE via Template Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 290 — PayLedger — GraphQL Broken Access Control
Web · XESXOR
Easy3 min
CUSTOM
Lab 290 — PayLedger — GraphQL Broken Access Control
Web · XESXOR
Easy3 min
CUSTOM
Lab 291 — HireFlow — Broken Authorization in Premium Feature Endpoints
Web · XESXOR
Easy3 min
CUSTOM
Lab 291 — HireFlow — Broken Authorization in Premium Feature Endpoints
Web · XESXOR
Easy2 min
CUSTOM
Lab 292 — TeamPulse — CSRF to Stored XSS Chain
Web · XESXOR
Medium5 min
CUSTOM
Lab 292 — TeamPulse — CSRF to Stored XSS Chain
Web · XESXOR
Medium5 min
CUSTOM
Lab 293 — CloudNest — Reflected XSS in Login Callback Label
Web · XESXOR
Medium5 min
CUSTOM
Lab 293 — CloudNest — Reflected XSS in Login Callback Label
Web · XESXOR
Medium5 min
CUSTOM
Lab 294 — TeamForge — GraphQL Self-Escalation via UpdateMembership
Web · XESXOR
Easy3 min
CUSTOM
Lab 294 — TeamForge — GraphQL Self-Escalation via UpdateMembership
Web · XESXOR
Easy3 min
CUSTOM
Lab 296 — DocuForge — Stored XSS via Vue.js Template Injection
Web · XESXOR
Medium6 min
CUSTOM
Lab 296 — DocuForge — Stored XSS via Vue.js Template Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 298 — PayLedger — SQL Injection via GraphQL Date Filters
Web · XESXOR
Easy5 min
CUSTOM
Lab 298 — PayLedger — SQL Injection via GraphQL Date Filters
Web · XESXOR
Easy5 min
CUSTOM
Lab 3 — DeskFlow — SQL Injection in Ticket View
Web · XESXOR
Medium4 min
CUSTOM
Lab 3 — DeskFlow — SQL Injection in Ticket View
Web · XESXOR
Medium4 min
CUSTOM
Lab 300 — PlanForge — Broken Authentication via Hidden Trial Activation
Web · XESXOR
Easy3 min
CUSTOM
Lab 300 — PlanForge — Broken Authentication via Hidden Trial Activation
Web · XESXOR
Easy2 min
CUSTOM
Lab 301 — VaultLine — 2FA Bypass via Rate Limit Evasion
Web · XESXOR
Medium3 min
CUSTOM
Lab 301 — VaultLine — 2FA Bypass via Rate Limit Evasion
Web · XESXOR
Medium3 min
CUSTOM
PROLab 302 — WorkPulse — Stored XSS to Account Takeover via SSO Unlink Chain
Web · XESXOR
Hard7 min
CUSTOM
PROLab 302 — WorkPulse — Stored XSS to Account Takeover via SSO Unlink Chain
Web · XESXOR
Hard6 min
CUSTOM
Lab 303 — DevGateway — Broken Access Control in Admin API
Web · XESXOR
Medium3 min
CUSTOM
Lab 303 — DevGateway — Broken Access Control in Admin API
Web · XESXOR
Medium3 min