Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
PROLab 354 — VaultAPI — JWT Authentication Bypass via JWE-Wrapped PlainJWT
Web · XESXOR
Hard5 min
CUSTOM
PROLab 354 — VaultAPI — JWT Authentication Bypass via JWE-Wrapped PlainJWT
Web · XESXOR
Hard5 min
CUSTOM
Lab 36 — PulseBoard — Prototype Pollution to RCE via EJS
Web · XESXOR
Medium5 min
CUSTOM
Lab 36 — PulseBoard — Prototype Pollution to RCE via EJS
Web · XESXOR
Medium5 min
CUSTOM
Lab 362 — LogPulse — Insecure Deserialization via Pickle Session Cookie
Web · XESXOR
Medium5 min
CUSTOM
Lab 362 — LogPulse — Insecure Deserialization via Pickle Session Cookie
Web · XESXOR
Medium5 min
CUSTOM
Lab 364 — PulseRelay — Path Traversal to RCE via Plugin Upload
Web · XESXOR
Medium3 min
CUSTOM
Lab 364 — PulseRelay — Path Traversal to RCE via Plugin Upload
Web · XESXOR
Medium3 min
CUSTOM
Lab 37 — WriteFlow — NoSQL Injection via Nested $where in Mongoose Populate
Web · XESXOR
Medium4 min
CUSTOM
Lab 37 — WriteFlow — NoSQL Injection via Nested $where in Mongoose Populate
Web · XESXOR
Medium4 min
CUSTOM
Lab 372 — PipelineIQ — Next.js Middleware Authorization Bypass
Web · XESXOR
Medium3 min
CUSTOM
Lab 372 — PipelineIQ — Next.js Middleware Authorization Bypass
Web · XESXOR
Medium3 min
CUSTOM
Lab 373 — PipelineIQ — Django ORM Filter Injection
Web · XESXOR
Medium4 min
CUSTOM
Lab 373 — PipelineIQ — Django ORM Filter Injection
Web · XESXOR
Medium4 min
CUSTOM
Lab 374 — PayStream — Race Condition in Promo Code Redemption
Web · XESXOR
Medium6 min
CUSTOM
Lab 374 — PayStream — Race Condition in Promo Code Redemption
Web · XESXOR
Medium6 min
CUSTOM
Lab 375 — PageFlow — Web Cache Deception via Path Normalization
Web · XESXOR
Medium4 min
CUSTOM
Lab 375 — PageFlow — Web Cache Deception via Path Normalization
Web · XESXOR
Medium4 min
CUSTOM
PROLab 376 — CodeNexus — SAML Signature Wrapping
Web · XESXOR
Hard7 min
CUSTOM
PROLab 376 — CodeNexus — SAML Signature Wrapping
Web · XESXOR
Hard7 min
CUSTOM
Lab 378 — PulseBoard — Cache Poisoning XSS via Next.js Header Misclassification
Web · XESXOR
Medium7 min
CUSTOM
Lab 378 — PulseBoard — Cache Poisoning XSS via Next.js Header Misclassification
Web · XESXOR
Medium7 min
CUSTOM
PROLab 379 — CrawlBase — Stored XSS to SSRF to Pickle Deserialization RCE
Web · XESXOR
Hard7 min
CUSTOM
PROLab 379 — CrawlBase — Stored XSS to SSRF to Pickle Deserialization RCE
Web · XESXOR
Hard7 min
CUSTOM
Lab 38 — PipelineForge — XXE in XML Pipeline Import
Web · XESXOR
Medium3 min
CUSTOM
Lab 38 — PipelineForge — XXE in XML Pipeline Import
Web · XESXOR
Medium3 min
CUSTOM
Lab 380 — BuildStream — RCE via Malicious npm Package Preinstall Script
Web · XESXOR
Medium3 min
CUSTOM
Lab 380 — BuildStream — RCE via Malicious npm Package Preinstall Script
Web · XESXOR
Medium3 min
CUSTOM
Lab 383 — ConnectFlow — SSTI
Web · XESXOR
Easy3 min
CUSTOM
Lab 383 — ConnectFlow — SSTI
Web · XESXOR
Easy3 min