TryHackMe El Bandito: H2.CL desync to steal bot credentials
HTTP request smuggling

El Bandito: H2.CL desync to steal bot credentials

October 23, 2026 · 6 min
TryHackMe HTTP Browser Desync: client-side smuggling via Werkzeug
HTTP request smuggling

HTTP Browser Desync: client-side smuggling via Werkzeug

October 22, 2026 · 9 min
TryHackMe WebSocket Request Smuggling: proxy bypass via fake upgrades
WebSocket smuggling

WebSocket Request Smuggling: proxy bypass via fake upgrades

October 22, 2026 · 6 min
TryHackMe HTTP Request Smuggling: CL.TE desync exploitation
HTTP request smuggling

HTTP Request Smuggling: CL.TE desync exploitation

October 21, 2026 · 7 min
TryHackMe Web App Pentesting Path: Notes
web-application

Web App Pentesting Path: Notes

March 31, 2026 · 5 min