Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 384 — DevPulse — RCE via AI Log Assistant Prompt Injection
Web · XESXOR
Easy3 min
CUSTOM
Lab 384 — DevPulse — RCE via AI Log Assistant Prompt Injection
Web · XESXOR
Easy3 min
CUSTOM
Lab 385 — SprintForge — Prototype Pollution to RCE via React Flight Protocol
Web · XESXOR
Medium5 min
CUSTOM
Lab 385 — SprintForge — Prototype Pollution to RCE via React Flight Protocol
Web · XESXOR
Medium4 min
CUSTOM
Lab 387 — ChainArena — Django ORM Injection to Admin Takeover
Web · XESXOR
Medium5 min
CUSTOM
Lab 387 — ChainArena — Django ORM Injection to Admin Takeover
Web · XESXOR
Medium4 min
CUSTOM
Lab 388 — ModelForge
Web · XESXOR
Medium4 min
CUSTOM
Lab 388 — ModelForge
Web · XESXOR
Medium4 min
CUSTOM
Lab 389 — PulseBoard — SSTI in Custom Widget Template Builder
Web · XESXOR
Medium4 min
CUSTOM
Lab 389 — PulseBoard — SSTI in Custom Widget Template Builder
Web · XESXOR
Medium5 min
CUSTOM
Lab 39 — PixelVault — RCE via ImageMagick Filename Command Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 39 — PixelVault — RCE via ImageMagick Filename Command Injection
Web · XESXOR
Medium4 min
CUSTOM
Lab 393 — ShareVault — Stored XSS via File Browser innerHTML
Web · XESXOR
Medium5 min
CUSTOM
Lab 393 — ShareVault — Stored XSS via File Browser innerHTML
Web · XESXOR
Medium5 min
CUSTOM
Lab 4 — EdgeRelay — HTTP Request Smuggling via CL-TE Desync
Web · XESXOR
Medium4 min
CUSTOM
Lab 4 — EdgeRelay — HTTP Request Smuggling via CL-TE Desync
Web · XESXOR
Medium4 min
CUSTOM
Lab 401 — InsightPulse — Broken Authorization on AI Chat Agent API
Web · XESXOR
Easy5 min
CUSTOM
Lab 401 — InsightPulse — Broken Authorization on AI Chat Agent API
Web · XESXOR
Easy5 min
CUSTOM
Lab 403 — GateKeep — Stored XSS to CSRF Chain in SSO Management
Web · XESXOR
Medium8 min
CUSTOM
Lab 403 — GateKeep — Stored XSS to CSRF Chain in SSO Management
Web · XESXOR
Medium7 min
CUSTOM
Lab 404 — MindVault — RCE via eval() in Search Filter Expressions
Web · XESXOR
Medium4 min
CUSTOM
Lab 404 — MindVault — RCE via eval() in Search Filter Expressions
Web · XESXOR
Medium4 min
CUSTOM
Lab 406 — PingRelay — Prototype Pollution to SSRF via CRLF Header Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 406 — PingRelay — Prototype Pollution to SSRF via CRLF Header Injection
Web · XESXOR
Medium5 min
CUSTOM
Lab 407 — LinguaSync — RCE via i18n Prototype Pollution
Web · XESXOR
Medium5 min
CUSTOM
Lab 407 — LinguaSync — RCE via i18n Prototype Pollution
Web · XESXOR
Medium5 min
CUSTOM
Lab 408 — MailNest — Broken Authentication via Unauthenticated Password Reset
Web · XESXOR
Easy4 min
CUSTOM
Lab 408 — MailNest — Broken Authentication via Unauthenticated Password Reset
Web · XESXOR
Easy4 min
CUSTOM
Lab 410 — HelpWise — Reflected XSS via Markdown Greeting in AI Chat
Web · XESXOR
Medium5 min
CUSTOM
Lab 410 — HelpWise — Reflected XSS via Markdown Greeting in AI Chat
Web · XESXOR
Medium4 min