Nov 26, 2025 · 3 min read · Coming from front-end development, JavaScript has always been familiar to me. I knew how to manipulate the DOM, structure events, work with APIs, build interfaces, and add interactivity. But learning JavaScript from a security perspective is an entir...
TOlufunke commented
Sep 27, 2025 · 3 min read · Found a hidden admin page via directory fuzzing, used default credentials to log in, then used the admin functionality to obtain a user shell and escalate to root. Final flag: 6483bee07c1c1d57f14e5b0717503c73 Hello Cyberfolks 👋 Today, we’re going ...
Join discussion
Jul 25, 2025 · 2 min read · Scenario You are contracted to perform a penetration test for a company, and through your pentest, you stumble upon an interesting file manager web application. As file managers tend to execute system commands, you are interested in testing for comma...
Join discussion
Jul 14, 2025 · 3 min read · Scenario You are tasked to perform a security assessment of a client's web application. Apply what you have learned in this module to obtain the flag. Walkthrough Accessing the target URL redirects us to the next page: After browsing the site for a ...
Join discussion
May 8, 2025 · 3 min read · Web applications are everywhere — handling everything from your login details to your payment info. But behind the scenes, they’re often built on systems that can be fragile when not properly secured. A simple mistake in how data is handled can open ...
Join discussionMar 16, 2025 · 33 min read · This article will cover the Upload Vulnerabilities write-up under the Web Fundamentals on THM. Getting Started Please read and follow the instructions in this task carefully. If you skip over this task and encounter connectivity errors as a result, t...
Join discussion
Feb 28, 2025 · 7 min read · This article will cover the How Websites Work write-up under the Web Fundamentals on THM. How websites work By the end of this room, you'll know how websites are created and will be introduced to some basic security issues. When you visit a website, ...
Join discussion
Feb 15, 2025 · 24 min read · This article will cover the Burp Suite: The Basics write-up under the Web Fundamentals on THM. Introduction Welcome to Burp Suite Basics! This particular room aims to understand the basics of the Burp Suite web application security testing framework....
Join discussion
Feb 5, 2025 · 12 min read · This article will cover the Walking An Application write-up under the Web Fundamentals on THM. Walking An Application In this room, you will learn how to manually review a web application for security issues using only the in-built tools in your brow...
Join discussion
Feb 5, 2025 · 10 min read · This article will cover the Content Discovery write-up under the Web Fundamentals on THM. What is Content Discovery Firstly, we should ask, in the context of web application security, what is content? Content can be many things, a file, video, pictur...
Join discussion