Cookie Theft | Classroom

TryHackMe Farewell: WAF rate-limit bypass to XSS cookie theft

Bypassing WAF

Farewell: WAF rate-limit bypass to XSS cookie theft

TryHackMe Padelify: blind XSS cookie theft to LFI admin takeover

Bypassing WAF

Padelify: blind XSS cookie theft to LFI admin takeover

TryHackMe HTTP Browser Desync: client-side smuggling via Werkzeug

HTTP request smuggling

HTTP Browser Desync: client-side smuggling via Werkzeug

TryHackMe Whats Your Name: XSS, CSRF and SQLi chain

XSS

Whats Your Name: XSS, CSRF and SQLi chain