Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 321 — MailPulse — Stored XSS via HTML Desanitization
Web · XESXOR
Medium8 min
CUSTOM
Lab 321 — MailPulse — Stored XSS via HTML Desanitization
Web · XESXOR
Medium8 min
CUSTOM
Lab 322 — NetPulse — IP Spoofing to RCE via Polling Agent API
Web · XESXOR
Medium4 min
CUSTOM
Lab 322 — NetPulse — IP Spoofing to RCE via Polling Agent API
Web · XESXOR
Medium4 min
CUSTOM
Lab 324 — ImageMagick RCE (PixelForge)
Web · XESXOR
Medium5 min
CUSTOM
Lab 324 — ImageMagick RCE (PixelForge)
Web · XESXOR
Medium4 min
CUSTOM
Lab 325 — ChatNova
Web · XESXOR
Medium5 min
CUSTOM
Lab 325 — ChatNova
Web · XESXOR
Medium5 min
CUSTOM
Lab 326 — PulseBoard — NoSQL Injection in Authentication
Web · XESXOR
Easy2 min
CUSTOM
Lab 326 — PulseBoard — NoSQL Injection in Authentication
Web · XESXOR
Easy3 min
CUSTOM
Lab 327 — PipelineIQ — NoSQL Injection Authentication Bypass
Web · XESXOR
Easy3 min
CUSTOM
Lab 327 — PipelineIQ — NoSQL Injection Authentication Bypass
Web · XESXOR
Easy3 min
CUSTOM
Lab 328 — DataNest — NoSQL Operator Injection in Authentication
Web · XESXOR
Easy3 min
CUSTOM
Lab 328 — DataNest — NoSQL Operator Injection in Authentication
Web · XESXOR
Easy3 min
CUSTOM
Lab 329 — PipelineIQ — NoSQL Injection Authentication Bypass
Web · XESXOR
Easy3 min
CUSTOM
Lab 329 — PipelineIQ — NoSQL Injection Authentication Bypass
Web · XESXOR
Easy3 min
CUSTOM
Lab 33 — PulsePress — Reflected XSS in Search Page
Web · XESXOR
Medium3 min
CUSTOM
Lab 33 — PulsePress — Reflected XSS in Search Page
Web · XESXOR
Medium3 min
CUSTOM
Lab 330 — AuthVault — Blind LDAP Injection in Directory Lookup
Web · XESXOR
Medium5 min
CUSTOM
Lab 330 — AuthVault — Blind LDAP Injection in Directory Lookup
Web · XESXOR
Medium5 min
CUSTOM
Lab 331 — PeopleDir — LDAP Injection Authentication Bypass
Web · XESXOR
Medium2 min
CUSTOM
Lab 331 — PeopleDir — LDAP Injection Authentication Bypass
Web · XESXOR
Medium2 min
CUSTOM
Lab 332 — CloudGate ID — Blind LDAP Injection in People Directory
Web · XESXOR
Medium6 min
CUSTOM
Lab 332 — CloudGate ID — Blind LDAP Injection in People Directory
Web · XESXOR
Medium6 min
CUSTOM
Lab 333 — LeadForge — XPath Injection in Contact Search
Web · XESXOR
Medium5 min
CUSTOM
Lab 333 — LeadForge — XPath Injection in Contact Search
Web · XESXOR
Medium5 min
CUSTOM
Lab 334 — DocuNest — XPath Injection in Knowledge Base Search
Web · XESXOR
Medium6 min
CUSTOM
Lab 334 — DocuNest — XPath Injection in Knowledge Base Search
Web · XESXOR
Medium6 min
CUSTOM
Lab 335 — LeadForge — XPath Injection in XML-Based CRM
Web · XESXOR
Medium5 min
CUSTOM
Lab 335 — LeadForge — XPath Injection in XML-Based CRM
Web · XESXOR
Medium5 min