Tryhackme | Classroom

TryHackMe Insecure Deserialisation: PHP Object Injection to RCE

Web Application Pentesting

Insecure Deserialisation: PHP Object Injection to RCE

TryHackMe LDAP Injection: Auth Bypass to Blind Exfiltration

Web Application Pentesting

LDAP Injection: Auth Bypass to Blind Exfiltration

TryHackMe Server-side Template Injection: SSTI to RCE

Web Application Pentesting

Server-side Template Injection: SSTI to RCE

TryHackMe Injectics: SQLi Filter Bypass to Twig RCE

Web Application Pentesting

Injectics: SQLi Filter Bypass to Twig RCE

TryHackMe ORM Injection: whereRaw and ORDER BY Injection

Web Application Pentesting

ORM Injection: whereRaw and ORDER BY Injection

TryHackMe XXE Injection: File Read, SSRF, and Exfiltration

Web Application Pentesting

XXE Injection: File Read, SSRF, and Exfiltration

TryHackMe NoSQL Injection: MongoDB Operator and Syntax

Web Application Pentesting

NoSQL Injection: MongoDB Operator and Syntax

TryHackMe Advanced SQL Injection: Five Evasion Techniques

Web Application Pentesting

Advanced SQL Injection: Five Evasion Techniques

TryHackMe Hammer: OTP Rate-Limit Bypass to JWT kid RCE

Web Application Pentesting

Hammer: OTP Rate-Limit Bypass to JWT kid RCE

TryHackMe Operation Promotion: SQLi, Command Injection, sudo find

Offensive Security

Operation Promotion: SQLi, Command Injection, sudo find