بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ

Lab 1: Basic SSRF Against the Local Server

In the ever-evolving landscape of cybersecurity, legacy protocols continue to pose significant risks. CVE-2026–24061, a critical…

Greetings, fellow cybersecurity enthusiasts and CTF players! In this writeup, we’ll walk through the solution of the “Smart Home” web…

How unsafe Pug interpolation turns template rendering into code execution.

Escaping is the process of converting special characters into a representation that ensures they are interpreted as data, not executable…

La vulnerabilidad consiste en inyectar código malicioso en una web, pudiendo así almacenarlo para que se ejecute cada vez que el usuario…

This lab contains an XSS vulnerability that is not directly exploitable due to browser URL-encoding.To solve the lab, take advantage of the…

Understanding XSS: A Clear, Practical Explanation

Learn about types of XSS(Cross-Site Scripting) vulnerabilities and how to prevent them.

Written By Ankush Prasad Sah

بسم الله والصلاة والسلام علي رسول الله صلي الله عليه وسلم

How unsafe JavaScript redirects turn trusted sites into attack vectors.

A walkthrough to finding RCE on NASA’s public facing host

Fortinet, FG-IR-25–084 bülteniyle FortiOS ve FortiSwitchManager ürünlerini etkileyen kritik (High) seviyeli bir zafiyeti (CVE-2025–25249)…

When working with SQL, you often need to compare results of two queries.
For this purpose, SQL provides set operators.

The Nature of “Blindness”

Hack Smarter lab

Esta vulnerabilidad utiliza las consultas SQL para obtener información de la base de datos y o hacer login sin contraseña.

Introduction

Introduction