TryHackMe Include: from property injection to log poisoning RCE
SSRF

Include: from property injection to log poisoning RCE

October 19, 2026 · 5 min
TryHackMe SSRF: forging requests from the server side
SSRF

SSRF: forging requests from the server side

October 19, 2026 · 4 min
TryHackMe XXE Injection: File Read, SSRF, and Exfiltration
Web Application Pentesting

XXE Injection: File Read, SSRF, and Exfiltration

October 15, 2026 · 5 min
TryHackMe Cloud Security Fundamentals: SSRF to IMDS Chain
Cloud Security

Cloud Security Fundamentals: SSRF to IMDS Chain

October 5, 2026 · 7 min
PortSwigger Web Security Academy Labs
portswigger

20 PortSwigger Labs: SSTI to Access Control

April 6, 2026 · 5 min
30 PortSwigger Labs โ€” Bug Bounty Marathon
portswigger

30 PortSwigger Labs โ€” Bug Bounty Marathon

April 2, 2026 · 3 min
Web App Pentesting: Injection & Client-Side
sqli

Web App Pentesting: Injection & Client-Side

April 2, 2026 · 4 min
PortSwigger Web Security Academy
portswigger

Burp Academy: Server-Side Vulns (Apprentice)

March 31, 2026 · 8 min
TryHackMe Web App Pentesting Path: Notes
web-application

Web App Pentesting Path: Notes

March 31, 2026 · 5 min