Web-Application-Pentesting | Classroom

TryHackMe CORS and SOP: cross-origin data exfiltration

CORS

CORS and SOP: cross-origin data exfiltration

TryHackMe DOM-Based Attacks: stored XSS via Vue v-html exploitation

DOM-based XSS

DOM-Based Attacks: stored XSS via Vue v-html exploitation

TryHackMe CSRF: token bypass and SameSite cookie exploitation

CSRF

CSRF: token bypass and SameSite cookie exploitation

TryHackMe XSS: reflected, stored, and DOM-based scripting attacks

cross-site scripting

XSS: reflected, stored, and DOM-based scripting attacks

TryHackMe Include: from property injection to log poisoning RCE

SSRF

Include: from property injection to log poisoning RCE

TryHackMe Prototype Pollution: injecting properties through the chain

prototype pollution

Prototype Pollution: injecting properties through the chain

TryHackMe File Inclusion: from path traversal to code execution

file inclusion

File Inclusion: from path traversal to code execution

TryHackMe SSRF: forging requests from the server side

SSRF

SSRF: forging requests from the server side

TryHackMe Insecure Deserialisation: PHP Object Injection to RCE

Web Application Pentesting

Insecure Deserialisation: PHP Object Injection to RCE

TryHackMe LDAP Injection: Auth Bypass to Blind Exfiltration

Web Application Pentesting

LDAP Injection: Auth Bypass to Blind Exfiltration