Cookies Writeup PicoCTF
A writeup for the picoCTF easy web challenge named Cookies.
Koussay Dhifi
XSS To Bypass CSRF Defenses
Introduction This is a writeup for the 24th lab within the XSS PortSwigger series titled Exploiting XSS to Bypass CSRF Defenses. For the report link you can find it here Investigation From the ...
Team - TryHackMe Writeup
Introduction This is another writeup for an easy THM machine titled Team. We will be using the PTES methodology when performing this machine as a whole penetration test. To see the professional r...
THM Startup - Full Attack Chain (FTP Misconfiguration to Root via PwnKit)
A complete walkthrough of the TryHackMe Startup machine, covering reconnaissance, exploitation via anonymous FTP upload, credential discovery through PCAP analysis, and privilege escalation using P...
Exploiting XSS to Capture Passwords
A PortSwigger XSS lab writeup about exploiting XSS to capture passwords.
Lab - Exploiting XSS to Steal Cookies
This writeup covers exploiting a stored XSS vulnerability to steal session cookies and impersonate users, part of the PortSwigger XSS lab series.
Reflected XSS into a Template Literal with Quotes and Backticks Unicode-Escaped
A PortSwigger XSS lab writeup about reflected XSS inside a JavaScript template literal with key characters Unicode-escaped.
Stored XSS into onclick Event with Angle Brackets and Double Quotes HTML-Encoded
A PortSwigger XSS lab writeup about stored XSS in an onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped.
Reflected XSS into a JavaScript String with Angle Brackets and Double Quotes HTML-Encoded and Single Quotes Escaped
A PortSwigger XSS lab writeup about escaping a JavaScript string when angle brackets and double quotes are HTML-encoded and single quotes are escaped.
Reflected XSS into a JavaScript String with Single Quote and Backslash Escaped
A PortSwigger XSS lab writeup about reflected XSS into a JavaScript string with single quote and backslash escaped.