CryptoCat

Pusheen Loves Graphs [easy]: HackTheBox Misc Challenge (IDA Pro)

7 - SQL Injection (low/med/high) - Damn Vulnerable Web Application (DVWA)

14 - JavaScript (low/med/high) - Damn Vulnerable Web Application (DVWA)

5 - File Upload (low/med/high) - Damn Vulnerable Web Application (DVWA)

1 - Brute Force (low/med/high) - Damn Vulnerable Web Application (DVWA)

Web Challenge Walkthroughs - Digital Overdose CTF 2021

Web Fuzzing (ffuf vs wfuzz) - Pentesting Tutorials

XSS in PDF.js (CVE-2024-4367) - "Upload" [Akasec CTF 2024]

Bypassing Basic PHP WAF to Read Files - "para-code" Web Challenge [DefCamp CTF 2022]

Fuzzing GET Parameters with ffuf - "Flag in Space" Web Challenge [Space Heroes CTF 2022]

REdiREKT: Extracting Malicious Redirections from Exploit Kit Traffic

Tier 1: HackTheBox Starting Point - 6 Machines - Full Walkthrough (beginner friendly)

Leaking Secret Data with a Heap Overflow - "Leek" Pwn Challenge [Angstrom CTF 2023]

Reverse Engineering (RE) Challenge Walkthroughs - PicoCTF 2022 (BEGINNER-FRIENDLY Capture The Flag)

Forensics Challenge Walkthroughs - PicoCTF 2022 (BEGINNER-FRIENDLY Capture The Flag)

HacktivityCon 2021 Capture The Flag (CTF) - Challenge Walkthroughs

Binary Exploitation (Pwn) Challenge Walkthroughs - Killer Queen CTF 2021

Web Challenges [Space Heroes CTF 2023]

Tier 1: Funnel - HackTheBox Starting Point - Full Walkthrough

16 - Open Redirect (low/med/high) - Damn Vulnerable Web Application (DVWA)

Heap Exploit (ret2win) - "Hellbound" Pwn Challenge [HackTheBox Cyber Apocalypse CTF 2022]

Angstrom CTF 2022 - Challenge Walkthroughs

3: Return to Win (Ret2Win) - Buffer Overflows - Intro to Binary Exploitation (Pwn)

Exploiting a Use-After-Free (UAF) Vulnerability - "Unsubscriptions Are Free" Pwn Challenge [PicoGym]

DOM Clobbering, Prototype Pollution and XSS - "sanity" Walkthrough [Amateurs CTF 2023]

0: Getting Started with Burp Suite - Gin and Juice Shop (Portswigger)

Format String Vulnerability - "Floor Mat Store" [INTIGRITI 1337UP LIVE CTF 2023]

Burp Suite Certified Professional (BSCP) Review + Tips/Tricks [Portswigger]

Teleporting Through Walls with Cheat Engine - "No Way Out" [PicoCTF 2023]

How to Approach an OSINT Challenge - "Photographs" [INTIGRITI 1337UP LIVE CTF 2023]

Is this NEW Generative AI Feature a GAME CHANGER? [Adobe Firefly]

LA CTF 2024: Web Challenge Walkthroughs (1-4)

HackTheBox Battlegrounds - Server Siege (Practice Mode)

NahamCon CTF 2023: Web Challenge Walkthroughs

Web Challenge Walkthroughs - PicoCTF 2022 (BEGINNER-FRIENDLY Capture The Flag)

CAN I WIN A GAME OF BATTLEGROUNDS?! [HackTheBox - Server Siege]

Tier 0: HackTheBox Starting Point - 5 Machines - Full Walkthrough (for beginners)

HTTP Header Injection - Python AppSec (by Duo Sec) - Veracode Security Labs Community Edition (free)

Mass Assignment - Python AppSec (by Duo Sec) - Veracode Security Labs Community Edition (free)

Tier 1: Responder - HackTheBox Starting Point - Full Walkthrough

Tier 0: Mongod - HackTheBox Starting Point - Full Walkthrough

APKrypt [easy]: HackTheBox Mobile Challenge (patching .smali code with apktool)

DNS Enumeration - Pentesting Tutorials

CVE-2022-4510: Directory Traversal RCE in binwalk

React String Sanitization - Common React Pitfalls - Veracode Security Labs Community Edition (free)

HackTheBox Certified Penetration Testing Specialist (CPTS) - Review + Tips

6 - Insecure Captcha (low/med/high) - Damn Vulnerable Web Application (DVWA)

2 - Command Injection (low/med/high) - Damn Vulnerable Web Application (DVWA)

15 - Authorisation Bypass (low/med/high) - Damn Vulnerable Web Application (DVWA)

JSON Injection - Python AppSec (by Duo Sec) - Veracode Security Labs Community Edition (free)

Forensics Challenge Walkthroughs - DownUnderCTF (DUCTF) 2021