Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 411 — CloudGate — JWT Algorithm Confusion via fast-jwt
Web · XESXOR
Medium8 min
CUSTOM
Lab 411 — CloudGate — JWT Algorithm Confusion via fast-jwt
Web · XESXOR
Medium8 min
CUSTOM
PROLab 412 — CodePillar — Prompt Injection to RCE via AI Agent Plugin Registration
Web · XESXOR
Hard7 min
CUSTOM
PROLab 412 — CodePillar — Prompt Injection to RCE via AI Agent Plugin Registration
Web · XESXOR
Hard6 min
CUSTOM
Lab 413 — PromptRelay — SQL Injection to RCE via Admin Tools
Web · XESXOR
Medium5 min
CUSTOM
Lab 413 — PromptRelay — SQL Injection to RCE via Admin Tools
Web · XESXOR
Medium4 min
CUSTOM
Lab 416 — SyncForge — Insecure Deserialization via Pickle Import
Web · XESXOR
Medium4 min
CUSTOM
Lab 416 — SyncForge — Insecure Deserialization via Pickle Import
Web · XESXOR
Medium3 min
CUSTOM
PROLab 417 — InkDrop — Class Pollution to SSTI via pydash
Web · XESXOR
Hard5 min
CUSTOM
PROLab 417 — InkDrop — Class Pollution to SSTI via pydash
Web · XESXOR
Hard5 min
CUSTOM
Lab 419 — FlowDesk — OIDC Email Claim Account Takeover
Web · XESXOR
Medium7 min
CUSTOM
Lab 419 — FlowDesk — OIDC Email Claim Account Takeover
Web · XESXOR
Medium7 min
CUSTOM
Lab 42 — ProsePad — DOM Clobbering to Stored XSS
Web · XESXOR
Medium4 min
CUSTOM
Lab 42 — ProsePad — DOM Clobbering to Stored XSS
Web · XESXOR
Medium4 min
CUSTOM
Lab 43 — NetShield — Reflected XSS via Auth Redirect to Admin Secret Theft
Web · XESXOR
Medium5 min
CUSTOM
Lab 43 — NetShield — Reflected XSS via Auth Redirect to Admin Secret Theft
Web · XESXOR
Medium5 min
CUSTOM
Lab 46 — RepoForge — SSRF to Redis RCE via Repository Import
Web · XESXOR
Medium4 min
CUSTOM
Lab 46 — RepoForge — SSRF to Redis RCE via Repository Import
Web · XESXOR
Medium4 min
CUSTOM
Lab 47 — PingRadar — Blind SSRF via Webhook Test Delivery
Web · XESXOR
Medium7 min
CUSTOM
Lab 47 — PingRadar — Blind SSRF via Webhook Test Delivery
Web · XESXOR
Medium7 min
CUSTOM
Lab 48 — PulseDesk — Stored XSS via Widget postMessage DOM Injection
Web · XESXOR
Medium7 min
CUSTOM
Lab 48 — PulseDesk — Stored XSS via Widget postMessage DOM Injection
Web · XESXOR
Medium7 min
CUSTOM
Lab 49 — PixelVault — Stored XSS via Malicious SVG Upload
Web · XESXOR
Medium3 min
CUSTOM
Lab 49 — PixelVault — Stored XSS via Malicious SVG Upload
Web · XESXOR
Medium3 min
CUSTOM
Lab 51 — InsightGrid — SQL Injection via Django JSONField Key Paths
Web · XESXOR
Medium6 min
CUSTOM
Lab 51 — InsightGrid — SQL Injection via Django JSONField Key Paths
Web · XESXOR
Medium6 min
CUSTOM
Lab 53 — TeamPulse — SQL Injection via WebSocket Employee Lookup
Web · XESXOR
Medium5 min
CUSTOM
Lab 53 — TeamPulse — SQL Injection via WebSocket Employee Lookup
Web · XESXOR
Medium4 min
CUSTOM
Lab 54 — PulseGuard — RCE via node:vm Sandbox Escape
Web · XESXOR
Medium4 min
CUSTOM
Lab 54 — PulseGuard — RCE via node:vm Sandbox Escape
Web · XESXOR
Medium4 min