Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 337 — LogStream
Web · XESXOR
Medium5 min
CUSTOM
Lab 337 — LogStream
Web · XESXOR
Medium5 min
CUSTOM
Lab 340 — PingRelay — Blind SSRF via Webhook Test
Web · XESXOR
Medium3 min
CUSTOM
Lab 340 — PingRelay — Blind SSRF via Webhook Test
Web · XESXOR
Medium3 min
CUSTOM
Lab 341 — KeyVault2FA — SSRF via OTP Account Import
Web · XESXOR
Easy4 min
CUSTOM
Lab 341 — KeyVault2FA — SSRF via OTP Account Import
Web · XESXOR
Easy4 min
CUSTOM
Lab 342 — CloudVault — Stored XSS via Malicious SVG Upload
Web · XESXOR
Medium4 min
CUSTOM
Lab 342 — CloudVault — Stored XSS via Malicious SVG Upload
Web · XESXOR
Medium4 min
CUSTOM
Lab 343 — FrameCast — RCE via Ghostscript EPS Processing in Thumbnail Import
Web · XESXOR
Medium5 min
CUSTOM
Lab 343 — FrameCast — RCE via Ghostscript EPS Processing in Thumbnail Import
Web · XESXOR
Medium5 min
CUSTOM
Lab 345 — PrintForge — RCE via Ghostscript Command Injection
Web · XESXOR
Medium4 min
CUSTOM
Lab 345 — PrintForge — RCE via Ghostscript Command Injection
Web · XESXOR
Medium4 min
CUSTOM
Lab 346 — DropVault — Path Traversal via Tar Symlink Cache Poisoning
Web · XESXOR
Medium6 min
CUSTOM
Lab 346 — DropVault — Path Traversal via Tar Symlink Cache Poisoning
Web · XESXOR
Medium6 min
CUSTOM
Lab 347 — PushRelay — SSRF via URL Parsing Confusion in Webhook Tester
Web · XESXOR
Medium4 min
CUSTOM
Lab 347 — PushRelay — SSRF via URL Parsing Confusion in Webhook Tester
Web · XESXOR
Medium4 min
CUSTOM
Lab 348 — Connectify — IDN Homograph OAuth Open Redirect
Web · XESXOR
Medium4 min
CUSTOM
Lab 348 — Connectify — IDN Homograph OAuth Open Redirect
Web · XESXOR
Medium4 min
CUSTOM
Lab 349 — InsightPulse — Prototype Pollution to RCE via TSQL Query Engine
Web · XESXOR
Medium6 min
CUSTOM
Lab 349 — InsightPulse — Prototype Pollution to RCE via TSQL Query Engine
Web · XESXOR
Medium6 min
CUSTOM
Lab 35 — GateKeeper SSO — Open Redirect via Regex URI Validation
Web · XESXOR
Medium4 min
CUSTOM
Lab 35 — GateKeeper SSO — Open Redirect via Regex URI Validation
Web · XESXOR
Medium4 min
CUSTOM
Lab 350 — VaultKeeper
Web · XESXOR
Medium4 min
CUSTOM
Lab 350 — VaultKeeper
Web · XESXOR
Medium4 min
CUSTOM
Lab 351 — FlowForge — RCE via Python Code Validation Endpoint
Web · XESXOR
Medium3 min
CUSTOM
Lab 351 — FlowForge — RCE via Python Code Validation Endpoint
Web · XESXOR
Medium3 min
CUSTOM
Lab 352 — PipeForge — Content-Type Confusion to Admin JWT Forge to RCE
Web · XESXOR
Medium6 min
CUSTOM
Lab 352 — PipeForge — Content-Type Confusion to Admin JWT Forge to RCE
Web · XESXOR
Medium6 min
CUSTOM
Lab 353 — MailForge — Insecure Deserialization via Custom Session Handler
Web · XESXOR
Medium5 min
CUSTOM
Lab 353 — MailForge — Insecure Deserialization via Custom Session Handler
Web · XESXOR
Medium5 min