SSTI | Classroom

TryHackMe WAF Exploitation Techniques: encoding and evasion

Bypassing WAF

WAF Exploitation Techniques: encoding and evasion

TryHackMe Web Frameworks Python: Django leak to Flask session forgery

Django

Web Frameworks Python: Django leak to Flask session forgery

TryHackMe Web Frameworks Code Review: source-to-sink Flask audit

code review

Web Frameworks Code Review: source-to-sink Flask audit

TryHackMe Server-side Template Injection: SSTI to RCE

Web Application Pentesting

Server-side Template Injection: SSTI to RCE

TryHackMe Injectics: SQLi Filter Bypass to Twig RCE

Web Application Pentesting

Injectics: SQLi Filter Bypass to Twig RCE

TryHackMe The Hollow Shell, A Zip Slip You Have to Restart to Feel

Web

The Hollow Shell, A Zip Slip You Have to Restart to Feel

TryHackMe Do Not Disturb, Four Doors, None of Them Locked

Web

Do Not Disturb, Four Doors, None of Them Locked

PortSwigger Web Security Academy Labs

portswigger

20 PortSwigger Labs: SSTI to Access Control

30 PortSwigger Labs — Bug Bounty Marathon

portswigger

30 PortSwigger Labs — Bug Bounty Marathon

7 PortSwigger Practitioner Labs: SSRF to Cache

portswigger

7 PortSwigger Practitioner Labs: SSRF to Cache