TryHackMe Whats Your Name: XSS, CSRF and SQLi chain
XSS

Whats Your Name: XSS, CSRF and SQLi chain

October 19, 2026 · 4 min
TryHackMe Injectics: SQLi Filter Bypass to Twig RCE
Web Application Pentesting

Injectics: SQLi Filter Bypass to Twig RCE

October 17, 2026 · 7 min
TryHackMe ORM Injection: whereRaw and ORDER BY Injection
Web Application Pentesting

ORM Injection: whereRaw and ORDER BY Injection

October 16, 2026 · 6 min
TryHackMe Advanced SQL Injection: Five Evasion Techniques
Web Application Pentesting

Advanced SQL Injection: Five Evasion Techniques

October 15, 2026 · 6 min
TryHackMe Operation Promotion: SQLi, Command Injection, sudo find
Offensive Security

Operation Promotion: SQLi, Command Injection, sudo find

October 14, 2026 · 6 min
TryHackMe Dead Drop: SQLi, require() RCE, and AddSelf to Domain Admin
Jr Penetration Tester

Dead Drop: SQLi, require() RCE, and AddSelf to Domain Admin

October 12, 2026 · 7 min
TryHackMe Silent Monitor: SQLi, Command Injection, KeePass to Root
Jr Penetration Tester

Silent Monitor: SQLi, Command Injection, KeePass to Root

October 11, 2026 · 6 min
TryHackMe Re-Testing: Verify Fixes, Catch Patches
Jr Penetration Tester

Re-Testing: Verify Fixes, Catch Patches

October 10, 2026 · 6 min
TryHackMe Exploitation and Weaponisation: Proving Real Impact
Metasploit and Exploitation

Exploitation and Weaponisation: Proving Real Impact

September 16, 2026 · 9 min
TryHackMe Recruit: File Read to SQLi to Admin
Web Application Security

Recruit: File Read to SQLi to Admin

September 1, 2026 · 5 min