TryHackMe | Classroom

TryHackMe HTTP Request Smuggling: CL.TE desync exploitation

HTTP request smuggling

HTTP Request Smuggling: CL.TE desync exploitation

TryHackMe CORS and SOP: cross-origin data exfiltration

CORS

CORS and SOP: cross-origin data exfiltration

TryHackMe DOM-Based Attacks: stored XSS via Vue v-html exploitation

DOM-based XSS

DOM-Based Attacks: stored XSS via Vue v-html exploitation

TryHackMe CSRF: token bypass and SameSite cookie exploitation

CSRF

CSRF: token bypass and SameSite cookie exploitation

TryHackMe XSS: reflected, stored, and DOM-based scripting attacks

cross-site scripting

XSS: reflected, stored, and DOM-based scripting attacks

TryHackMe Include: from property injection to log poisoning RCE

SSRF

Include: from property injection to log poisoning RCE

TryHackMe Prototype Pollution: injecting properties through the chain

prototype pollution

Prototype Pollution: injecting properties through the chain

TryHackMe File Inclusion: from path traversal to code execution

file inclusion

File Inclusion: from path traversal to code execution

TryHackMe SSRF: forging requests from the server side

SSRF

SSRF: forging requests from the server side

TryHackMe Whats Your Name: XSS, CSRF and SQLi chain

XSS

Whats Your Name: XSS, CSRF and SQLi chain