Posts | Classroom

TryHackMe Include: from property injection to log poisoning RCE

SSRF

Include: from property injection to log poisoning RCE

TryHackMe Prototype Pollution: injecting properties through the chain

prototype pollution

Prototype Pollution: injecting properties through the chain

TryHackMe File Inclusion: from path traversal to code execution

file inclusion

File Inclusion: from path traversal to code execution

TryHackMe SSRF: forging requests from the server side

SSRF

SSRF: forging requests from the server side

TryHackMe Whats Your Name: XSS, CSRF and SQLi chain

XSS

Whats Your Name: XSS, CSRF and SQLi chain

TryHackMe Insecure Deserialisation: PHP Object Injection to RCE

Web Application Pentesting

Insecure Deserialisation: PHP Object Injection to RCE

TryHackMe LDAP Injection: Auth Bypass to Blind Exfiltration

Web Application Pentesting

LDAP Injection: Auth Bypass to Blind Exfiltration

TryHackMe Server-side Template Injection: SSTI to RCE

Web Application Pentesting

Server-side Template Injection: SSTI to RCE

TryHackMe Injectics: SQLi Filter Bypass to Twig RCE

Web Application Pentesting

Injectics: SQLi Filter Bypass to Twig RCE

TryHackMe ORM Injection: whereRaw and ORDER BY Injection

Web Application Pentesting

ORM Injection: whereRaw and ORDER BY Injection