Leaking Passwords via CSS Injection - "Fancy Login Form" [WHY CTF 2025]

Offensive Security Web Expert (OSWE) Review + Tips/Tricks [OffSec]

Tsuku CTF Web Challenge Walkthroughs (2025)

CTF@CIT Web Challenge Walkthroughs (2025)

18 - API Security (low/med/high) - Damn Vulnerable Web Application (DVWA)

17 - Cryptography (low/med/high) - Damn Vulnerable Web Application (DVWA)

A Scammer Tried to Hack Me!

403 Bypass and Deserialization in BentoML Library (CVE-2024-2912) - "Summar-AI-ze" [Web Challenge]

XSS via CSPT and DOM Clobbering - "SafeNotes 2.0" [INTIGRITI 1337UP CTF 2024]

Basic Stack Buffer Overflow (with parameters) - "Retro2Win" [INTIGRITI 1337UP CTF 2024]

X-Forwarded-For Header Spoofing and XXE - "BioCorp" [INTIGRITI 1337UP CTF 2024]

One Time Pad (OTP) with a Twist - "Schrödinger's Pad" [INTIGRITI 1337UP CTF 2024]

JWT Algorithm Confusion and SSTI (Pug) - "Cat Club" [INTIGRITI 1337UP CTF 2024]

Bypassing Server-side Anti-Cheat Protections - "Bug Squash (part 2)" [INTIGRITI 1337UP CTF 2024]

A Guide for Solving Beginner CTF Challenges [INTIGRITI 1337UP CTF 2024]

Cookie Forgery, Signature Bypass and Blind Command Injection - "Feature Unlocked" [CSCTF 2024]

XSS in PDF.js (CVE-2024-4367) - "Upload" [Akasec CTF 2024]

2: XML External Entity Injection (XXE) - Gin and Juice Shop (Portswigger)

Burp Suite Certified Practitioner (BSCP) Review + Tips/Tricks [Portswigger]

1: SQL Injection (Union + Blind) - Gin and Juice Shop (Portswigger)

HackTheBox Cyber Apocalypse 2024: Web Challenge Walkthroughs

0: Getting Started with Burp Suite - Gin and Juice Shop (Portswigger)

LA CTF 2024: Web Challenge Walkthroughs (1-4)

How to Approach an OSINT Challenge - "Photographs" [INTIGRITI 1337UP LIVE CTF 2023]

Format String Vulnerability - "Floor Mat Store" [INTIGRITI 1337UP LIVE CTF 2023]

Websocket SQLi and Weak JWT Signing Key - "Bug Report Repo" [INTIGRITI 1337UP LIVE CTF 2023]

Unity Game Hacking Challenge - "Azusawa’s Gacha World" [SekaiCTF]

DOM Clobbering, Prototype Pollution and XSS - "sanity" Walkthrough [Amateurs CTF 2023]

NahamCon CTF 2023: Web Challenge Walkthroughs

16 - Open Redirect (low/med/high) - Damn Vulnerable Web Application (DVWA)

Is this NEW Generative AI Feature a GAME CHANGER? [Adobe Firefly]

15 - Authorisation Bypass (low/med/high) - Damn Vulnerable Web Application (DVWA)

Leaking Secret Data with a Heap Overflow - "Leek" Pwn Challenge [Angstrom CTF 2023]

Web Challenges [Space Heroes CTF 2023]

Teleporting Through Walls with Cheat Engine - "No Way Out" [PicoCTF 2023]

Doublespeak: Jailbreaking ChatGPT-style Sandboxes using Linguistic Hacks

CAN I WIN A GAME OF BATTLEGROUNDS?! [HackTheBox - Server Siege]

CVE-2022-4510: Directory Traversal RCE in binwalk

HackTheBox Battlegrounds - Server Siege (Practice Mode)

HackTheBox Certified Penetration Testing Specialist (CPTS) - Review + Tips

Tier 1: Funnel - HackTheBox Starting Point - Full Walkthrough

Tier 0: Synced - HackTheBox Starting Point - Full Walkthrough

Tier 0: Mongod - HackTheBox Starting Point - Full Walkthrough

Tier 1: Three - HackTheBox Starting Point - Full Walkthrough

Linked List Exploit Continued - GOT Overwrite - "Links 2+3" Pwn Challenge [ImaginaryCTF]

Exploiting a Vulnerable Linked List Implementation - "Links 1" Pwn Challenge [ImaginaryCTF]

Exploiting a Use-After-Free (UAF) Vulnerability - "Unsubscriptions Are Free" Pwn Challenge [PicoGym]

Tier 2: Base - HackTheBox Starting Point - Full Walkthrough

SEETF [Social Engineering Experts] 2022 - Challenge Walkthroughs

Intergalactic Recovery [easy]: HackTheBox Forensics Challenge (RAID 5 Disk Recovery)

Heap Exploit (ret2win) - "Hellbound" Pwn Challenge [HackTheBox Cyber Apocalypse CTF 2022]

Tier 0: Redeemer - HackTheBox Starting Point - Full Walkthrough

Angstrom CTF 2022 - Challenge Walkthroughs

NahamCon CTF 2022: Web Challenge Walkthroughs

10: Bypassing Stack Canaries (leak + write) - Buffer Overflows - Intro to Binary Exploitation (Pwn)

Emdee Five for Life [easy]: HackTheBox Misc Challenge (BeautifulSoup / Burp Intruder)

9: Overwriting Global Offset Table (GOT) Entries with printf() - Intro to Binary Exploitation (Pwn)

Tier 1: Responder - HackTheBox Starting Point - Full Walkthrough

Binary Exploitation (Pwn) Challenge Walkthroughs - PicoCTF 2022 (BEGINNER-FRIENDLY Capture The Flag)

Reverse Engineering (RE) Challenge Walkthroughs - PicoCTF 2022 (BEGINNER-FRIENDLY Capture The Flag)