@hackerc215

Hacker2255

@hackerc215Joined March 2025

"Web Security, API Security, Mobile Security, Network Security & TryHackMe Lab Walkthroughs"

About

Nothing here yet.

Available for

Nothing here yet.

Hacker2255's blogs

Cybersecurity Walkthroughshackerc215.hashnode.dev23 posts

Exploiting Business Logic Flaws: Lightweight I33t Jacket for Free

Introduction Business logic vulnerabilities arise when an application fails to enforce rules properly. In this lab from PortSwigger, we explore how logic flaws in coupon validation can be abused to bypass payment rules and get a Lightweight I33t leat...

Apr 23, 2025 · 2 min readhackerc215.hashnode.dev

Exploiting Inconsistent Security Controls - PortSwigger Lab Walkthrough

Introduction In this post, I’ll walk you through solving the Inconsistent Security Controls lab from PortSwigger’s Web Security Academy. This lab demonstrates how flawed logic can allow unauthorized access to admin functionalities. Step-by-Step Walkt...

Apr 21, 2025 · 2 min readhackerc215.hashnode.dev

Information Disclosure in Error Messages - PortSwigger Lab Walkthrough

Introduction In this blog, I’ll walk you through how I solved the PortSwigger lab titled “Information Disclosure in Error Messages”. This lab teaches the importance of verbose error messages and how they can leak sensitive backend information. Step-b...

Apr 19, 2025 · 2 min readhackerc215.hashnode.dev

Exploiting WebSocket Vulnerabilities to Trigger alert() - PortSwigger Lab Walkthrough

Introduction In this blog, I’ll walk you through the “Manipulating WebSocket messages to exploit vulnerabilities” lab from PortSwigger’s Web Security Academy. This lab demonstrates how insecure websocket implementations can be exploited to execute Ja...

Apr 18, 2025 · 2 min readhackerc215.hashnode.dev

How I Exploited Username Enumeration via Different Responses (PortSwigger Lab)

Introduction In this blog, I’ll walk you through the “Username Enumeration via Different Responses” lab from PortSwigger’s web security Academy. This lab demonstrates a classic vulnerability where an attacker can enumerate valid usernames based on di...

Apr 17, 2025 · 2 min readhackerc215.hashnode.dev

Hacker2255

About

Available for

Hacker2255's blogs

Exploiting Business Logic Flaws: Lightweight I33t Jacket for Free

Exploiting Inconsistent Security Controls - PortSwigger Lab Walkthrough

Information Disclosure in Error Messages - PortSwigger Lab Walkthrough

Exploiting WebSocket Vulnerabilities to Trigger alert() - PortSwigger Lab Walkthrough

How I Exploited Username Enumeration via Different Responses (PortSwigger Lab)

Search Hashnode

Hacker2255

About

Available for

Hacker2255's blogs

Exploiting Business Logic Flaws: Lightweight I33t Jacket for Free

Exploiting Inconsistent Security Controls - PortSwigger Lab Walkthrough

Information Disclosure in Error Messages - PortSwigger Lab Walkthrough

Exploiting WebSocket Vulnerabilities to Trigger alert() - PortSwigger Lab Walkthrough

How I Exploited Username Enumeration via Different Responses (PortSwigger Lab)