Archives
- 31 Aug PortSwigger Academy Labs Walkthrough
- 31 Aug PortSwigger Walkthrough - Indirect prompt injection
- 31 Aug PortSwigger Walkthrough - Exploiting vulnerabilities in LLM APIs
- 31 Aug PortSwigger Walkthrough - Bypassing AI scanner defenses to exfiltrate sensitive information
- 31 Aug PortSwigger Walkthrough - Exploiting LLM APIs with excessive agency
- 31 Aug PortSwigger Walkthrough - Exploiting AI agents to trigger secondary vulnerabilities
- 31 Aug PortSwigger Walkthrough - Exploiting AI agents to exfiltrate sensitive information
- 31 Aug PortSwigger Walkthrough - Exploiting AI agents to perform destructive actions
- 25 Aug PortSwigger Walkthrough - Manipulating WebSocket messages to exploit vulnerabilities
- 25 Aug PortSwigger Walkthrough - Manipulating the WebSocket handshake to exploit vulnerabilities
- 25 Aug PortSwigger Walkthrough - Cross-site WebSocket hijacking
- 25 Aug PortSwigger Walkthrough - SSRF with filter bypass via open redirection vulnerability
- 25 Aug PortSwigger Walkthrough - Blind SSRF with out-of-band detection
- 25 Aug PortSwigger Walkthrough - SSRF with blacklist-based input filter
- 25 Aug PortSwigger Walkthrough - Basic SSRF against the local server
- 25 Aug PortSwigger Walkthrough - Basic SSRF against another back-end system
- 25 Aug PortSwigger Walkthrough - CORS vulnerability with trusted null origin
- 25 Aug PortSwigger Walkthrough - CORS vulnerability with trusted insecure protocols
- 25 Aug PortSwigger Walkthrough - CORS vulnerability with basic origin reflection
- 28 Jun PortSwigger Walkthrough - File path traversal, validation of start of path
- 28 Jun PortSwigger Walkthrough - File path traversal, validation of file extension with null byte bypass
- 28 Jun PortSwigger Walkthrough - File path traversal, simple case
- 28 Jun PortSwigger Walkthrough - File path traversal, traversal sequences stripped with superfluous URL-decode
- 28 Jun PortSwigger Walkthrough - File path traversal, traversal sequences stripped non-recursively
- 28 Jun PortSwigger Walkthrough - File path traversal, traversal sequences blocked with absolute path bypass
- 28 Jun PortSwigger Walkthrough - Username enumeration via subtly different responses
- 28 Jun PortSwigger Walkthrough - Username enumeration via response timing
- 28 Jun PortSwigger Walkthrough - Username enumeration via different responses
- 28 Jun PortSwigger Walkthrough - Username enumeration via account lock
- 28 Jun PortSwigger Walkthrough - Password reset poisoning via middleware
- 28 Jun PortSwigger Walkthrough - Password reset broken logic
- 28 Jun PortSwigger Walkthrough - Password brute-force via password change
- 28 Jun PortSwigger Walkthrough - Offline password cracking
- 28 Jun PortSwigger Walkthrough - Brute-forcing a stay-logged-in cookie
- 28 Jun PortSwigger Walkthrough - Broken brute-force protection, IP block
- 28 Jun PortSwigger Walkthrough - 2FA Simple Bypass
- 28 Jun PortSwigger Walkthrough - 2FA Broken Logic
- 15 Jun Certified Azure Red Team Professional (CARTP) review
- 26 Jan Certified WiFiChallenge Professional (CWP) review
- 30 Dec AI Red Teamer by HackTheBox review
- 20 Dec DVWA Complete Walkthrough
- 20 Dec DVWA Walkthrough I - Brute Force
- 20 Dec DVWA Walkthrough II - Command Injection
- 20 Dec DVWA Walkthrough III - Cross Site Request Forgery (CSRF)
- 20 Dec DVWA Walkthrough IV - File Inclusion
- 20 Dec DVWA Walkthrough V - File Upload
- 20 Dec DVWA Walkthrough VI - Insecure CAPTCHA
- 20 Dec DVWA Walkthrough VII - SQL Injection
- 20 Dec DVWA Walkthrough VIII - SQL Injection (Blind)
- 20 Dec DVWA Walkthrough IX - Weak Session IDs
- 20 Dec DVWA Walkthrough X - DOM Based Cross Site Scripting (XSS)
- 20 Dec DVWA Walkthrough XI - Reflected Cross Site Scripting (XSS)
- 20 Dec DVWA Walkthrough XII - Stored Cross Site Scripting (XSS)
- 20 Dec DVWA Walkthrough XIII - Content-Security Policy Bypass
- 20 Dec DVWA Walkthrough XIV - JavaScript Attacks
- 20 Dec DVWA Walkthrough XV - Authorisation Bypass
- 20 Dec DVWA Walkthrough XVI - Open HTTP Redirect
- 20 Dec DVWA Walkthrough XVII - Cryptography
- 20 Dec DVWA Walkthrough XVIII - API Security
- 07 Nov Certified Red Team Professional (CRTP) review
- 21 Oct Create your own private AI for hacking