Learning SSTI with gosecure
Gosecure的SSTI环境学习记录
环境地址
gosecure 的ssti教程地址template-injection-workshop
[Read More]
Intigriti XSS Challenge-2020 Writeup
Intigriti’s December XSS Challenge https://challenge-1220.intigriti.io/
[Read More]
An unsuccessful expressjs SSTI story
Recon
Response Header x-powered-by: express. An expressjs website.
[Read More]
alert 1337 - jquery prototype pollution
challenge here
https://msrkp.github.io/
[Read More]
alert(23) to win - eval(location.pathname)
while surfing the internet for some sec news, a xss challenge came across.
challenge address https://renwax23.github.io/X/chal/oct22/
[Read More]