Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
PROLab 55 — LinguaPress — SSTI via Multilingual Widget Shortcodes
Web · XESXOR
Hard5 min
CUSTOM
PROLab 55 — LinguaPress — SSTI via Multilingual Widget Shortcodes
Web · XESXOR
Hard5 min
CUSTOM
Lab 56 — DataPulse — XXE to SSRF via SVG Avatar Upload
Web · XESXOR
Medium5 min
CUSTOM
Lab 56 — DataPulse — XXE to SSRF via SVG Avatar Upload
Web · XESXOR
Medium5 min
CUSTOM
Lab 57 — ChartForge — Path Traversal in Code Examples Viewer
Web · XESXOR
Easy2 min
CUSTOM
Lab 57 — ChartForge — Path Traversal in Code Examples Viewer
Web · XESXOR
Easy2 min
CUSTOM
Lab 58 — ReportForge — SSRF via PDF Export Logo URL
Web · XESXOR
Easy4 min
CUSTOM
Lab 58 — ReportForge — SSRF via PDF Export Logo URL
Web · XESXOR
Easy4 min
CUSTOM
Lab 59 — NetPulse — RCE via Command Injection in Network Diagnostics
Web · XESXOR
Medium3 min
CUSTOM
Lab 59 — NetPulse — RCE via Command Injection in Network Diagnostics
Web · XESXOR
Medium3 min
CUSTOM
Lab 6 — HookRelay — SSRF via IPv6-Mapped-IPv4 Bypass
Web · XESXOR
Medium3 min
CUSTOM
Lab 6 — HookRelay — SSRF via IPv6-Mapped-IPv4 Bypass
Web · XESXOR
Medium3 min
CUSTOM
Lab 60 — CalcForge — RCE via Expression Evaluator Sandbox Escape
Web · XESXOR
Medium3 min
CUSTOM
Lab 60 — CalcForge — RCE via Expression Evaluator Sandbox Escape
Web · XESXOR
Medium3 min
CUSTOM
Lab 61 — OrderNova — Negative Quantity Price Manipulation
Web · XESXOR
Easy3 min
CUSTOM
Lab 61 — OrderNova — Negative Quantity Price Manipulation
Web · XESXOR
Easy3 min
CUSTOM
Lab 62 — NimbusDash — 2FA Bypass via Premature Session Establishment
Web · XESXOR
Medium3 min
CUSTOM
Lab 62 — NimbusDash — 2FA Bypass via Premature Session Establishment
Web · XESXOR
Medium3 min
CUSTOM
Lab 63 — DataPulse — Insecure Deserialization via Preferences Cookie
Web · XESXOR
Medium4 min
CUSTOM
Lab 63 — DataPulse — Insecure Deserialization via Preferences Cookie
Web · XESXOR
Medium4 min
CUSTOM
Lab 66 — GrowthPilot — Stored XSS via User Registration
Web · XESXOR
Medium5 min
CUSTOM
Lab 66 — GrowthPilot — Stored XSS via User Registration
Web · XESXOR
Medium5 min
CUSTOM
Lab 67 — SnapGrid — Stored XSS via IPTC Image Metadata Description
Web · XESXOR
Medium5 min
CUSTOM
Lab 67 — SnapGrid — Stored XSS via IPTC Image Metadata Description
Web · XESXOR
Medium4 min
CUSTOM
Lab 69 — TeamPulse — Reflected XSS in OAuth2 Error Callback
Web · XESXOR
Medium3 min
CUSTOM
Lab 69 — TeamPulse — Reflected XSS in OAuth2 Error Callback
Web · XESXOR
Medium3 min
CUSTOM
Lab 7 — TeamForge - Privilege Escalation via Invitation Flow
Web · XESXOR
Medium4 min
CUSTOM
Lab 7 — TeamForge - Privilege Escalation via Invitation Flow
Web · XESXOR
Medium3 min
CUSTOM
Lab 70 — LivePulse
Web · XESXOR
Medium4 min
CUSTOM
Lab 70 — LivePulse
Web · XESXOR
Medium4 min