Hacking For Ramen

Series

Web pentest

Articles in this series

eWPT certificate review

Oct 15, 20218 min read

Introduction Some time ago I passed the OSCP, and that wasn't a breeze. You can read more on that here. I promised myself to take something simpler...

eWPT certificate review

Authentication bypass via OAuth implicit flow

Oct 17, 20212 min read

This is a writeup for a challenge from PortSwigger's Web Security Academy. In this one, we will learn how a misconfigured OAuth authentication can be...

Authentication bypass via OAuth implicit flow

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Nov 25, 20212 min read

This is a writeup for a challenge from PortSwigger's Web Security Academy. In this one, we will learn how an SQL injection can be discovered and...

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

SQL injection vulnerability allowing login bypass

Nov 29, 20211 min read

This is a writeup for a challenge from PortSwigger's Web Security Academy. In this one, we will learn how to bypass the login page with a simple SQL...

SQL injection vulnerability allowing login bypass

Reflected XSS into HTML context with nothing encoded

Dec 1, 20212 min read

This is a writeup for a challenge from PortSwigger's Web Security Academy. In this one, we will learn how a simple Cross Site Scripting vulnerability...

Reflected XSS into HTML context with nothing encoded

Stored XSS into HTML context with nothing encoded

Dec 2, 20211 min read

This is a writeup for a challenge from PortSwigger's Web Security Academy. In this one, we will learn how a Stored Cross Site Scripting (XSS)...

Stored XSS into HTML context with nothing encoded