PRiTi.EX·Nov 4Lab7: Password reset poisoning via dangling markupCapture Carlos’s newly generated password from the password-reset email and use it to log in to his account.
PRiTi.EX·Nov 3Lab6: Host validation bypass via connection state attackThe objective is to exploit incorrect Host header validation by reusing a previously validated HTTP connection to access the internal admin…
PRiTi.EX·Nov 2Lab5: SSRF via flawed request parsingIn this Lab it accepts the absolute URL instead of the Host header. To solve the lab follow me.
PRiTi.EX·Oct 30Lab2: Host header authentication bypass — HTTP Host header attacksThis lab makes an assumption about the privilege level of the user based on the HTTP Host header. I solved it using a simple trick follow…
PRiTi.EX·Oct 27Lab1: Basic password reset poisoning — HTTP Host header attacksTo solve this takes more time because i unable to understand the basic of functionality so i write it from basic so every one can…
