PinnedHanzala Ghayas AbbasiinInfoSec Write-upsBlitzstorm CTF 2024 | Web OFFICIAL Write-UpChallenge Name : TindogJan 30Jan 30
PinnedHanzala Ghayas AbbasiinInfoSec Write-upsIgnite 2023 CTF machine walkthroughThis machine CTF will tell you how do LFI and misconfiguration in ngnix default config file can lead to machine takeover or sometime…Dec 19, 2023Dec 19, 2023
Hanzala Ghayas AbbasiinInfoSec Write-upsWriteup: Exploiting exact-match cache rules for web cache deception @ PortSwigger AcademyBefore starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…19h ago19h ago
Hanzala Ghayas AbbasiinInfoSec Write-upsWriteup: Exploiting cache server normalization for web cache deception @ PortSwigger AcademyBefore starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…1d ago1d ago
Hanzala Ghayas AbbasiinInfoSec Write-upsWriteup: Exploiting origin server normalization for web cache deception @ PortSwigger AcademyBefore starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…Sep 4Sep 4
Hanzala Ghayas AbbasiinInfoSec Write-upsWriteup: Exploiting path delimiters for web cache deception @ PortSwigger AcademyBefore starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…Sep 3Sep 3
Hanzala Ghayas AbbasiinInfoSec Write-upsWriteup: Path mapping for web cache deception @ PortSwigger AcademyBefore starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…Aug 29Aug 29
Hanzala Ghayas AbbasiinInfoSec Write-upsBasic Pentesting Writeup | TryHackMeThis is a machine that allows you to practice web app hacking and privilege escalationSep 16, 2023Sep 16, 2023
Hanzala Ghayas AbbasiinInfoSec Write-upsLesson Learned writup || TryHackMeThis room will give us lesson that when you try different sql injection command without knowing there consequences.Aug 30, 2023Aug 30, 2023
Hanzala Ghayas AbbasiinInfoSec Write-upsGrep writeup | TryHackmeThis grep challenge will tests your reconnaissance and OSINT skillsAug 30, 2023Aug 30, 2023
