YPYogeshwar Peelainexploitnotes.hashnode.dev·2d ago · 18 min readTryHackMe : The London Bridge writeupSummary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-encoded URL and fetches it server-side - classic SSRF 11N
YPYogeshwar Peelainexploitnotes.hashnode.dev·3d ago · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
JJasonincybersage.hashnode.dev·Jul 10 · 11 min readSQL InjectionsWHAT IS SQLi? In this article, we’ll be referring to SQL injections as SQLi. SQLi is a web security vulnerability that allows an attacker to interfere with queries between an application and its datab00
MBMouhamed Ben Abdallahinerinmin-writeups.hashnode.dev·May 12 · 8 min readUnprotected Admin FunctionalityPlatform: PortSwigger Web Security Academy Category: Access Control / Vertical Privilege Escalation Difficulty: Apprentice Tool(s): Browser only Date: 12/05/2026 Overview This lab demonstrates a ver00
EEEmma Engströminpentesting-dvwa.hashnode.dev·May 6 · 20 min readCryptography Problems in DVWAIntroduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essential00
WBWiktoria Blomgren Strandberginpentesting-dvwa.hashnode.dev·May 5 · 22 min readFile Inclusion in DVWA1 Introduction In this post, the File Inclusion vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for local file inclusion (LFI) attacks on all levels is to read 00
MBMouhamed Ben Abdallahinerinmin-writeups.hashnode.dev·May 2 · 4 min readFile path traversal, simple case WriteUp & WalkthroughLab Writeup: File Path Traversal — Simple Case Platform: PortSwigger Web Security Academy Vulnerability: Path Traversal (CWE-22) Difficulty: Apprentice Tool Used: Caido (Burp Suite alternative) What 00
WBWiktoria Blomgren Strandberginpentesting-dvwa.hashnode.dev·Apr 26 · 28 min readBlind SQL Injection in DVWA1 Introduction In this post, the Blind SQL Injection vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to find the version of the SQL00
WBWiktoria Blomgren Strandberginpentesting-dvwa.hashnode.dev·Apr 18 · 27 min readInsecure CAPTCHA in DVWA1 Introduction In this post, the Insecure CAPTCHA vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to bypass the poor CAPTCHA system00
WBWiktoria Blomgren Strandberginpentesting-dvwa.hashnode.dev·Apr 12 · 16 min readWeak Session IDs in DVWA1 Introduction In this post, the Weak Session IDs vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to work out how the ID is generat00
