Writeup Library
4915 detailed walkthroughs across HTB, THM, and PortSwigger. Pro writeups unlock exclusive content.
CUSTOM
Lab 86 — DealForge — SQL Injection via Backslash Escape Bypass of Quote-Doubling in H2
Web · XESXOR
Medium5 min
CUSTOM
Lab 86 — DealForge — SQL Injection via Backslash Escape Bypass of Quote-Doubling in H2
Web · XESXOR
Medium5 min
CUSTOM
Lab 87 — GridWatch — SQL Injection in Agent Heartbeat API
Web · XESXOR
Medium3 min
CUSTOM
Lab 87 — GridWatch — SQL Injection in Agent Heartbeat API
Web · XESXOR
Medium3 min
CUSTOM
Lab 88 — ShelfSpace — SSRF via SVG Image Upload
Web · XESXOR
Medium6 min
CUSTOM
Lab 88 — ShelfSpace — SSRF via SVG Image Upload
Web · XESXOR
Medium5 min
CUSTOM
Lab 89 — PingRadar — SSRF via DNS Rebinding (TOCTOU)
Web · XESXOR
Medium6 min
CUSTOM
Lab 89 — PingRadar — SSRF via DNS Rebinding (TOCTOU)
Web · XESXOR
Medium6 min
CUSTOM
Lab 90 — InsightDash — SSRF via Avatar Proxy Endpoint
Web · XESXOR
Medium3 min
CUSTOM
Lab 90 — InsightDash — SSRF via Avatar Proxy Endpoint
Web · XESXOR
Medium3 min
CUSTOM
Lab 91 — PingRadar — SSRF Filter Bypass via Open Redirect Chain
Web · XESXOR
Medium6 min
CUSTOM
Lab 91 — PingRadar — SSRF Filter Bypass via Open Redirect Chain
Web · XESXOR
Medium5 min
CUSTOM
Lab 92 — EventPulse — SSRF via IPv6 Bypass in Webhook Verification
Web · XESXOR
Medium4 min
CUSTOM
Lab 92 — EventPulse — SSRF via IPv6 Bypass in Webhook Verification
Web · XESXOR
Medium4 min
CUSTOM
Lab 93 — LinkRadar
Web · XESXOR
Medium4 min
CUSTOM
Lab 93 — LinkRadar
Web · XESXOR
Medium4 min
CUSTOM
Lab 94 — MediaForge — ImageMagick Command Injection via File Upload (ImageTragick)
Web · XESXOR
Medium4 min
CUSTOM
Lab 94 — MediaForge — ImageMagick Command Injection via File Upload (ImageTragick)
Web · XESXOR
Medium4 min
CUSTOM
Lab 95 — CloudCrate — SSRF in File Import Feature
Web · XESXOR
Easy3 min
CUSTOM
Lab 95 — CloudCrate — SSRF in File Import Feature
Web · XESXOR
Easy3 min
CUSTOM
Lab 96 — DataShift — RCE via Command Injection in Connection Tester
Web · XESXOR
Easy3 min
CUSTOM
Lab 96 — DataShift — RCE via Command Injection in Connection Tester
Web · XESXOR
Easy3 min
CUSTOM
Lab 97 — UptimePulse — SSRF Chain to RCE via Cloud Metadata
Web · XESXOR
Medium4 min
CUSTOM
Lab 97 — UptimePulse — SSRF Chain to RCE via Cloud Metadata
Web · XESXOR
Medium4 min
CUSTOM
Lab 98 — SprintDeck — SSRF via Link Preview URL Filter Bypass
Web · XESXOR
Medium3 min
CUSTOM
Lab 98 — SprintDeck — SSRF via Link Preview URL Filter Bypass
Web · XESXOR
Medium3 min
CUSTOM
Lab 99 — CashPilot — IDOR in Team Member Management
Web · XESXOR
Easy4 min
CUSTOM
Lab 99 — CashPilot — IDOR in Team Member Management
Web · XESXOR
Easy4 min
CUSTOM
Lanternfall
Web · XESXOR
Easy3 min
CUSTOM
Lanternfall
Web · XESXOR
Easy3 min