HTTP Request Smuggling (TryHackMe)
Link to the challenge on TryHackMe: HTTP Request Smuggling Introduction Introduction HTTP Request Smuggling is a vulnerability that arises when there are mismatches in different web infrastructure com
#burpsuite
Posts tagged #burpsuite
Cupid's Matchmaker (TryHackMe) - storedXSS on form
My Dearest Hacker, Tired of soulless AI algorithms? At Cupid's Matchmaker, real humans read your personality survey and personally match you with compatible singles. Our dedicated matchmaking team rev
Love Letter Locker (TryHackMe) - IDOR
Lover Letter Locker is a Valentine's-themed web application that allows users to create and store love letters. The challenge description hints at privacy concerns with "For your eyes only?" - suggest
Mother's Secret
🚀 Introduction This writeup documents my journey through the Mother's Secrets challenge on TryHackMe, part of the DevSecOps learning path. The challenge presents a compelling scenario inspired by the 1979 sci-fi classic "Alien," where players must i...
Next.js: CVE-2025-29927 (TryHackMe)
Introduction In January 2025, security researchers Rachid and Yasser Allam uncovered a critical vulnerability in Next.js that sent shockwaves through the web development community. CVE-2025-29927, a middleware authorization bypass flaw, affects one o...
Race Conditions - Toy to The World (TryHackMe) 🧑🎄🎉
High-traffic events are every attacker’s favourite playground. Flash sales, ticket drops, limited releases — all share one thing in common: pressure on timing. When systems are pushed to their limits, even a few milliseconds can mean the difference b...
