TryHackMe Source Code Review PHP: XXE to deserialization RCE
PHP

Source Code Review PHP: XXE to deserialization RCE

October 23, 2026 · 11 min
TryHackMe Include: from property injection to log poisoning RCE
SSRF

Include: from property injection to log poisoning RCE

October 19, 2026 · 5 min
TryHackMe Support: Five Weak Trust Boundaries to RCE
Jr Penetration Tester

Support: Five Weak Trust Boundaries to RCE

September 6, 2026 · 8 min
TryHackMe Recruit: File Read to SQLi to Admin
Web Application Security

Recruit: File Read to SQLi to Admin

September 1, 2026 · 5 min
TryHackMe CSRF Introduction: Forging a Weak Token
Jr Penetration Tester

CSRF Introduction: Forging a Weak Token

September 1, 2026 · 6 min