HackTheBox - Validation

Second-order SQL injection

HackTheBox - Schooled

Moodle exploitation using CVEs

HackTheBox - Heist

Learn how RID cycling could be used for enumerating AD users

HackTheBox - Spectra

Getting password from automatic login script of ChromeOS

HackTheBox - Tenet

Friendly PHP insecure deserialization attack and race condition