Web Application Security | Classroom

TryHackMe NoScope: Alf.io returnClass Sandbox Escape to RCE

Jr Penetration Tester

NoScope: Alf.io returnClass Sandbox Escape to RCE

TryHackMe Support: Five Weak Trust Boundaries to RCE

Jr Penetration Tester

Support: Five Weak Trust Boundaries to RCE

TryHackMe API Pentesting: BOLA to Admin in Four Requests

Jr Penetration Tester

API Pentesting: BOLA to Admin in Four Requests

TryHackMe Broken Authentication: Four Ways Past a Login

Jr Penetration Tester

Broken Authentication: Four Ways Past a Login

TryHackMe Recruit: File Read to SQLi to Admin

Web Application Security

Recruit: File Read to SQLi to Admin

TryHackMe XSS Introduction: Six Payload Contexts

Jr Penetration Tester

XSS Introduction: Six Payload Contexts

TryHackMe CSRF Introduction: Forging a Weak Token

Jr Penetration Tester

CSRF Introduction: Forging a Weak Token

TryHackMe SQL Injection Introduction: Four Lab Levels

Jr Penetration Tester

SQL Injection Introduction: Four Lab Levels

TryHackMe Web Server Attacks II: IIS Tilde and WebDAV

Jr Penetration Tester

Web Server Attacks II: IIS Tilde and WebDAV

TryHackMe Web Server Attacks I: Four Servers, One Host

Jr Penetration Tester

Web Server Attacks I: Four Servers, One Host