get aHEAD Writeup PicoCTF
A picoCTF web challenge writeup about using a HEAD request to retrieve the flag from HTTP response headers.
Koussay Dhifi
dont-use-client-side Writeup PicoCTF
A picoCTF web challenge writeup about recovering a client-side checked password from JavaScript source code.
Reflected XSS in a JavaScript URL with Some Characters Blocked
A PortSwigger XSS lab writeup about reflected XSS in a JavaScript URL with some characters blocked.
n0s4n1ty 1 Writeup PicoCTF
A writeup for the picoCTF easy web challenge named n0s4n1ty 1.
Scavenger Hunt Writeup PicoCTF
A writeup for the picoCTF easy web challenge named Scavenger Hunt.
Reflected XSS Protected by Very Strict CSP with Dangling Markup Attack
A PortSwigger XSS lab writeup about bypassing a strict CSP by using dangling markup and form hijacking.
Reflected XSS Protected by CSP with CSP Bypass
A PortSwigger XSS lab writeup about bypassing CSP by injecting a directive through a user-controlled report-uri value.
Cookies Writeup PicoCTF
A writeup for the picoCTF easy web challenge named Cookies.
XSS To Bypass CSRF Defenses
Introduction This is a writeup for the 24th lab within the XSS PortSwigger series titled Exploiting XSS to Bypass CSRF Defenses. For the report link you can find it here Investigation From the ...
Team - TryHackMe Writeup
Introduction This is another writeup for an easy THM machine titled Team. We will be using the PTES methodology when performing this machine as a whole penetration test. To see the professional r...