Cross Site Scripting [Patch PHP]

CloudPanel Session Hijacking (CVE-2024-24320)

MiniCTF (BringMeToTheCore) - Challenge Walkthrough

Binary Exploitation (Heap Based Overflow) Local Variable value override & GOT Overwrite

Import BurpSuite SSL Cert to local Trusted Certs

Server-Side Template Injection (SSTI) Flask/Jinja

Arbitrary File Download : Path Traversal & Local File Disclosure

Eagle MiniCTF (Easy) Demo

Analyzing phishing attack with HTTP Live Header

LSW CMS (RCE PoC)

Perform RCE from LFI via Access Log Poisoning + Bypass Redirect

Arbitrary File Download : Exploiting RCE through source code disclosure

Insecure Direct Object References (Basic Explanation & Exploitation)

Authenticated/Unauthenticated File upload bypass (Shell Upload Vulnerability)

XML Entities Injection (XXE) Basic Explanation and Exploitation

Local File Inclusion [Exploit to RCE & Patch]

Local File Inclusion (Basic Explanation & Exploitation) [PART 1]

[BinaryFile_Shellcode_Converter] disassemble binary file and convert to byte code string/shellcode

BufferOverFlow (executing shellcode through RCE)

Web Pentest Challenge PoC [PART 2]

Web Pentest Challenge PoC [PART 1]

DFM Web Penetration Challenge (0x0overflow)

Server Side Request Forgery (Basic Exploitation)

Cross Site Scripting [Patch PHP]

XSS Injection (Cookie Stealing + Changing Data)