Hanzala Ghayas Abbasi – Medium

Home

Following

Library

Reading history

Stories

Stats

Hanzala Ghayas Abbasi

Pinned

Published in
InfoSec Write-ups

Blitzstorm CTF 2024 | Web OFFICIAL Write-Up

Challenge Name : Tindog

Jan 30, 2024

Blitzstorm CTF 2024 | Web OFFICIAL Write-Up

Jan 30, 2024

Pinned

Published in
InfoSec Write-ups

Ignite CTF 2023 | Machine walkthrough

This machine CTF will tell you how do LFI and misconfiguration in ngnix default config file can lead to machine takeover or sometime…

Dec 19, 2023

Ignite CTF 2023 | Machine walkthrough

Dec 19, 2023

Pinned

Published in
InfoSec Write-ups

Understanding CVE-2023–24329 -Python urlparse Function

First I want to tell you what does what does urlparse do? The URL parsing functions focus on splitting a URL string into its components, or…

Aug 14, 2023

Understanding CVE-2023–24329 -Python urlparse Function

Aug 14, 2023

Published in
InfoSec Write-ups

Writeup: Exploiting exact-match cache rules for web cache deception @ PortSwigger Academy

Before starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…

Sep 11, 2024

Writeup: Exploiting exact-match cache rules for web cache deception @ PortSwigger Academy

Sep 11, 2024

Published in
InfoSec Write-ups

Writeup: Exploiting cache server normalization for web cache deception @ PortSwigger Academy

Before starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…

Sep 10, 2024

Writeup: Exploiting cache server normalization for web cache deception @ PortSwigger Academy

Sep 10, 2024

Published in
InfoSec Write-ups

Writeup: Exploiting origin server normalization for web cache deception @ PortSwigger Academy

Before starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…

Sep 4, 2024

Writeup: Exploiting origin server normalization for web cache deception @ PortSwigger Academy

Sep 4, 2024

Published in
InfoSec Write-ups

Writeup: Exploiting path delimiters for web cache deception @ PortSwigger Academy

Before starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…

Sep 3, 2024

Writeup: Exploiting path delimiters for web cache deception @ PortSwigger Academy

Sep 3, 2024

Published in
InfoSec Write-ups

Writeup: Path mapping for web cache deception @ PortSwigger Academy

Before starting, configure FoxyProxy to intercept requests through Burp Suite. Ensure that ‘Intercept’ is turned off in Burp Suite while…

Aug 29, 2024

Writeup: Path mapping for web cache deception @ PortSwigger Academy

Aug 29, 2024

Published in
InfoSec Write-ups

Basic Pentesting Writeup | TryHackMe

This is a machine that allows you to practice web app hacking and privilege escalation

Sep 16, 2023

Basic Pentesting Writeup | TryHackMe

Sep 16, 2023

Published in
InfoSec Write-ups

Lesson Learned writup || TryHackMe

This room will give us lesson that when you try different sql injection command without knowing there consequences.

Aug 30, 2023

Lesson Learned writup || TryHackMe

Aug 30, 2023

Hanzala Ghayas Abbasi

Hanzala Ghayas Abbasi

Pentester | Web Security | Full Stack Developer

Lists

Web Cache Deception All Labs | Portswigger

Help
Status
About
Careers
Press
Blog
Privacy
Rules
Terms
Text to speech