Apprentice | MINGON

2026

[WRITE-UP] PORTSWIGGER - INSECURE DIRECT OBJECT REFERENCES
Jul 4

[WRITE-UP] PORTSWIGGER - USER ID CONTROLLED BY REQUEST PARAMETER WITH PASSWORD DISCLOSURE
Jul 3

[WRITE-UP] PORTSWIGGER - USER ID CONTROLLED BY REQUEST PARAMETER WITH DATA LEAKAGE IN REDIRECT
Jul 3

[WRITE-UP] PORTSWIGGER - USER ID CONTROLLED BY REQUEST PARAMETER, WITH UNPREDICTABLE USER IDS
Jul 3

[WRITE-UP] PORTSWIGGER - USER ID CONTROLLED BY REQUEST PARAMETER
Jul 3

[WRITE-UP] PORTSWIGGER - USER ROLE CAN BE MODIFIED IN USER PROFILE
Jul 2

[WRITE-UP] PORTSWIGGER - USER ROLE CONTROLLED BY REQUEST PARAMETER
Jul 2

[WRITE-UP] PORTSWIGGER - UNPROTECTED ADMIN FUNCTIONALITY WITH UNPREDICTABLE URL
Jul 2

[WRITE-UP] PORTSWIGGER - UNPROTECTED ADMIN FUNCTIONALITY
Jul 2

[WRITE-UP] PORTSWIGGER - FILE PATH TRAVERSAL, SIMPLE CASE
Jun 28

[WRITE-UP] PORTSWIGGER - CSRF VULNERABILITY WITH NO DEFENSES
Jun 23

[WRITE-UP] PORTSWIGGER - MANIPULATING WEBSOCKET MESSAGES TO EXPLOIT VULNERABILITIES
Jun 12

[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO A JAVASCRIPT STRING WITH ANGLE BRACKETS HTML ENCODED
Jun 3

[WRITE-UP] PORTSWIGGER - STORED XSS INTO ANCHOR HREF ATTRIBUTE WITH DOUBLE QUOTES HTML-ENCODED
Jun 2

[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO ATTRIBUTE WITH ANGLE BRACKETS HTML-ENCODED
Jun 2

[WRITE-UP] PORTSWIGGER - DOM XSS IN JQUERY SELECTOR SINK USING A HASHCHANGE EVENT
Jun 2

[WRITE-UP] PORTSWIGGER - DOM XSS IN JQUERY ANCHOR HREF ATTRIBUTE SINK USING LOCATION.SEARCH SOURCE
Jun 2

[WRITE-UP] PORTSWIGGER - DOM XSS IN INNERHTML SINK USING SOURCE LOCATION.SEARCH
Jun 1

[WRITE-UP] PORTSWIGGER - DOM XSS IN DOCUMENT.WRITE SINK USING SOURCE LOCATION.SEARCH
Jun 1

[WRITE-UP] PORTSWIGGER - STORED XSS INTO HTML CONTEXT WITH NOTHING ENCODED
Jun 1

[WRITE-UP] PORTSWIGGER - REFLECTED XSS INTO HTML CONTEXT WITH NOTHING ENCODED
Jun 1

[WRITE-UP] PORTSWIGGER - SQL INJECTION VULNERABILITY ALLOWING LOGIN BYPASS
May 20

[WRITE-UP] PORTSWIGGER - SQL INJECTION VULNERABILITY IN WHERE CLAUSE ALLOWING RETRIEVAL OF HIDDEN DATA
May 20