Posts | Classroom

TryHackMe XXE Injection: File Read, SSRF, and Exfiltration

Web Application Pentesting

XXE Injection: File Read, SSRF, and Exfiltration

TryHackMe NoSQL Injection: MongoDB Operator and Syntax

Web Application Pentesting

NoSQL Injection: MongoDB Operator and Syntax

TryHackMe Advanced SQL Injection: Five Evasion Techniques

Web Application Pentesting

Advanced SQL Injection: Five Evasion Techniques

TryHackMe Hammer: OTP Rate-Limit Bypass to JWT kid RCE

Web Application Pentesting

Hammer: OTP Rate-Limit Bypass to JWT kid RCE

TryHackMe Operation Promotion: SQLi, Command Injection, sudo find

Offensive Security

Operation Promotion: SQLi, Command Injection, sudo find

TryHackMe Dead Drop: SQLi, require() RCE, and AddSelf to Domain Admin

Jr Penetration Tester

Dead Drop: SQLi, require() RCE, and AddSelf to Domain Admin

TryHackMe Disgruntled: Linux Forensics of an Insider Logic Bomb

Linux Forensics

Disgruntled: Linux Forensics of an Insider Logic Bomb

TryHackMe Silent Monitor: SQLi, Command Injection, KeePass to Root

Jr Penetration Tester

Silent Monitor: SQLi, Command Injection, KeePass to Root

TryHackMe Domino: IDOR to Forged JWT to RCE to Root

Jr Penetration Tester

Domino: IDOR to Forged JWT to RCE to Root

TryHackMe Re-Testing: Verify Fixes, Catch Patches

Jr Penetration Tester

Re-Testing: Verify Fixes, Catch Patches