Web Application Red Teaming | Classroom

TryHackMe Juicy: XSS to SSRF via unsanitised LLM output

Attacking LLMs

Juicy: XSS to SSRF via unsanitised LLM output

TryHackMe Model Poisoning: supply chain and training data attacks

Attacking LLMs

Model Poisoning: supply chain and training data attacks

TryHackMe LLM Output Handling: XSS and RCE via model output

Attacking LLMs

LLM Output Handling: XSS and RCE via model output

TryHackMe WAF Exploitation Techniques: encoding and evasion

Bypassing WAF

WAF Exploitation Techniques: encoding and evasion

TryHackMe WAF Introduction: from packet filters to OWASP CRS rules

Bypassing WAF

WAF Introduction: from packet filters to OWASP CRS rules

TryHackMe Farewell: WAF rate-limit bypass to XSS cookie theft

Bypassing WAF

Farewell: WAF rate-limit bypass to XSS cookie theft

TryHackMe Padelify: blind XSS cookie theft to LFI admin takeover

Bypassing WAF

Padelify: blind XSS cookie theft to LFI admin takeover

TryHackMe Sequence: stored XSS to Docker socket escape

stored XSS

Sequence: stored XSS to Docker socket escape

TryHackMe Voyage: container escape via kernel module

container escape

Voyage: container escape via kernel module

TryHackMe Extract: gopher SSRF to middleware bypass

SSRF

Extract: gopher SSRF to middleware bypass