--- title: "#webhacking articles | Hashnode" description: "Explore 18 articles tagged #webhacking on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/webhacking" --- Tag # #webhacking 18 posts · 1 followers [Alejandro Baño](https://hashnode.com/@alexb616) · [Sep 21](https://hashnode.com/posts/business-logic-flaws-when-the-bug-is-the-behavior/6ab110c51a972732a9db878e) ### [Business Logic Flaws: When the bug is the behavior](https://blog.cain.tech/business-logic-flaws-when-the-bug-is-the-behavior?utm_source=hashnode&utm_medium=feed) From donation feature to infinite points glitch 14 min read · [blog.cain.tech](https://blog.cain.tech/business-logic-flaws-when-the-bug-is-the-behavior?utm_source=hashnode&utm_medium=feed) [Falkenkralle](https://hashnode.com/@falkenkralle) · [Aug 2](https://hashnode.com/posts/template-terror/6a6f4e46e1f2446c9bfb5dc5) ### [Template Terror](https://ttpsandtricks.hashnode.dev/template-terror?utm_source=hashnode&utm_medium=feed) How I found and exploited server-side template injection in a Flask/Jinja2 CTF app — reading /etc/passwd and getting RCE, mistakes and all. 9 min read · [ttpsandtricks.hashnode.dev](https://ttpsandtricks.hashnode.dev/template-terror?utm_source=hashnode&utm_medium=feed) [robertovg24](https://hashnode.com/@robertovg) · [Jul 29](https://hashnode.com/posts/verifiable-bookmarklets/6a69c9e70e49d83b4a449d3e) ### [Verifiable Bookmarklets](https://robertovg.hashnode.dev/verifiable-bookmarklets?utm_source=hashnode&utm_medium=feed) AI can generate bookmarklets in seconds, but can you prove the executable matches the source easily? Verifiable Bookmarklets give you that! 8 min read · [robertovg.hashnode.dev](https://robertovg.hashnode.dev/verifiable-bookmarklets?utm_source=hashnode&utm_medium=feed) [Benjamin Chukwu](https://hashnode.com/@A-buka) · [Nov 26, 2025](https://hashnode.com/posts/seeing-an-old-language-with-new-eyes/6926f8269ba72596315595e0) ### [Seeing an Old Language With New Eyes](https://abuka-analyzes.hashnode.dev/seeing-an-old-language-with-new-eyes?utm_source=hashnode&utm_medium=feed) Exploring JavaScript's security vulnerabilities changes understanding from front-end basics to seeing potential threats in client-side code 3 min read · [abuka-analyzes.hashnode.dev](https://abuka-analyzes.hashnode.dev/seeing-an-old-language-with-new-eyes?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/seeing-an-old-language-with-new-eyes/6926f8269ba72596315595e0) [Arqam](https://hashnode.com/@arqam992) · [Sep 27, 2025](https://hashnode.com/posts/preignition-htb-starting-point-walkthrough/68d81171e0066b55ea5317dc) ### [Preignition — HTB (Starting Point) — Walkthrough](https://arqam.hashnode.dev/preignition-htb-starting-point-walkthrough?utm_source=hashnode&utm_medium=feed) Step-by-step Preignition HTB walkthrough: fast HTTP enumeration, admin access, and privilege escalation with commands & screenshots — perfect for beginners. 3 min read · [arqam.hashnode.dev](https://arqam.hashnode.dev/preignition-htb-starting-point-walkthrough?utm_source=hashnode&utm_medium=feed) [Ido Abramov](https://hashnode.com/@lookkattme) · [Jul 25, 2025](https://hashnode.com/posts/hackthebox-command-injections-skills-assessment-walkthrough/68837394e4fa7438d2dc710a) ### [HackTheBox - Command Injections - Skills Assessment Walkthrough](https://id0xa.hashnode.dev/hackthebox-command-injections-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed) Scenario You are contracted to perform a penetration test for a company, and through your pentest, you stumble upon an interesting file manager web application. As file managers tend to execute system commands, you are interested in testing for comma... 2 min read · [id0xa.hashnode.dev](https://id0xa.hashnode.dev/hackthebox-command-injections-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed) [Ido Abramov](https://hashnode.com/@lookkattme) · [Jul 14, 2025](https://hashnode.com/posts/hackthebox-server-side-attacks-skills-assessment-walkthrough/6874c16821c05aa1de7cf080) ### [HackTheBox - Server-side Attacks - Skills Assessment Walkthrough](https://id0xa.hashnode.dev/hackthebox-server-side-attacks-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed) Scenario You are tasked to perform a security assessment of a client's web application. Apply what you have learned in this module to obtain the flag. Walkthrough Accessing the target URL redirects us to the next page: After browsing the site for a ... 3 min read · [id0xa.hashnode.dev](https://id0xa.hashnode.dev/hackthebox-server-side-attacks-skills-assessment-walkthrough?utm_source=hashnode&utm_medium=feed) [Cyberkid](https://hashnode.com/@imcyberkid) · [May 8, 2025](https://hashnode.com/posts/web-hacking-a-real-world-threat-you-can-learn-to-stop/681c2727dd25d8492d23004d) ### [Web Hacking: A Real-World Threat You Can Learn to Stop](https://natas-unlocked.hashnode.dev/web-hacking-a-real-world-threat-you-can-learn-to-stop?utm_source=hashnode&utm_medium=feed) Web applications are everywhere — handling everything from your login details to your payment info. But behind the scenes, they’re often built on systems that can be fragile when not properly secured. A simple mistake in how data is handled can open ... 3 min read · [natas-unlocked.hashnode.dev](https://natas-unlocked.hashnode.dev/web-hacking-a-real-world-threat-you-can-learn-to-stop?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Mar 16, 2025](https://hashnode.com/posts/web-fundamentals-upload-vulnerabilities-tryhackme/67d736f2f3a4c436bfb5b4e3) ### [Web Fundamentals: Upload Vulnerabilities (TryHackMe)](https://www.sharonjebitok.com/web-fundamentals-upload-vulnerabilities-tryhackme?utm_source=hashnode&utm_medium=feed) This article will cover the Upload Vulnerabilities write-up under the Web Fundamentals on THM. Getting Started Please read and follow the instructions in this task carefully. If you skip over this task and encounter connectivity errors as a result, t... 33 min read · [sharonjebitok.com](https://www.sharonjebitok.com/web-fundamentals-upload-vulnerabilities-tryhackme?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Feb 28, 2025](https://hashnode.com/posts/web-fundamentals-how-websites-work-tryhackme/67c2076f80fc12453896ca10) ### [Web Fundamentals: How Websites Work (TryHackMe)](https://www.sharonjebitok.com/web-fundamentals-how-websites-work-tryhackme?utm_source=hashnode&utm_medium=feed) This article will cover the How Websites Work write-up under the Web Fundamentals on THM. How websites work By the end of this room, you'll know how websites are created and will be introduced to some basic security issues. When you visit a website, ... 7 min read · [sharonjebitok.com](https://www.sharonjebitok.com/web-fundamentals-how-websites-work-tryhackme?utm_source=hashnode&utm_medium=feed)