Categoría: writeups

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Web shell upload via extension blacklist bypass

Web shell upload via path traversal

Web shell upload via Content-Type restriction bypass

Remote code execution via web shell upload

Exploiting LLM APIs with excessive agency writeup

Exploiting a mass assignment vulnerability writeup

Finding and exploiting an unused API endpoint

Exploiting server-side parameter pollution in a query string Portswigger Lab Solution