AmirHossein Soltani

@UCHmJH3TC7satEFAe32SWA7Q - 24 subscribers

تمامی چلنج های پورت سوییگر در این چنل قرار میگیره رایتاپ هاشون All portswigger challenges are placed in this channel, their writeups

Home Videos Live Playlists

Exploiting LLM APIs with excessive agency - APPRENTICE

Exploiting LLM APIs with excessive agency - APPRENTICE AmirHossein Soltani

46 views - 2 years ago

Exploiting an API endpoint using documentation - APPRENTICE

Exploiting an API endpoint using documentation - APPRENTICE AmirHossein Soltani

34 views - 2 years ago

Exploiting NoSQL operator injection to bypass authentication - APPRENTICE

Exploiting NoSQL operator injection to bypass authentication - APPRENTICE AmirHossein Soltani

152 views - 2 years ago

Detecting NoSQL injection - APPRENTICE

Detecting NoSQL injection - APPRENTICE AmirHossein Soltani

63 views - 2 years ago

Limit overrun race conditions - APPRENTICE

Limit overrun race conditions - APPRENTICE AmirHossein Soltani

12 views - 2 years ago

Accessing private GraphQL posts - APPRENTICE

Accessing private GraphQL posts - APPRENTICE AmirHossein Soltani

29 views - 2 years ago

Remote code execution via server-side prototype pollution - PRACTITIONER

Remote code execution via server-side prototype pollution - PRACTITIONER AmirHossein Soltani

31 views - 2 years ago

Bypassing flawed input filters for server-side prototype pollution - PRACTITIONER

Bypassing flawed input filters for server-side prototype pollution - PRACTITIONER AmirHossein Soltani

7 views - 2 years ago

Detecting server-side prototype pollution without polluted property reflection - PRACTITIONER

Detecting server-side prototype pollution without polluted property reflection - PRACTITIONER AmirHossein Soltani

12 views - 2 years ago

Privilege escalation via server-side prototype pollution - PRACTITIONER

Privilege escalation via server-side prototype pollution - PRACTITIONER AmirHossein Soltani

29 views - 2 years ago

Client-side prototype pollution in third-party libraries - PRACTITIONER

Client-side prototype pollution in third-party libraries - PRACTITIONER AmirHossein Soltani

17 views - 2 years ago

Client-side prototype pollution via flawed sanitization - PRACTITIONER

Client-side prototype pollution via flawed sanitization - PRACTITIONER AmirHossein Soltani

9 views - 2 years ago

DOM XSS via an alternative prototype pollution vector - Prototype pollution

DOM XSS via an alternative prototype pollution vector - Prototype pollution AmirHossein Soltani

12 views - 2 years ago

DOM XSS via client-side prototype pollution - PRACTITIONER

DOM XSS via client-side prototype pollution - PRACTITIONER AmirHossein Soltani

21 views - 2 years ago

Client-side prototype pollution via browser APIs - PRACTITIONER

Client-side prototype pollution via browser APIs - PRACTITIONER AmirHossein Soltani

43 views - 2 years ago

Scanning non-standard data structures - PRACTITIONER

Scanning non-standard data structures - PRACTITIONER AmirHossein Soltani

686 views - 2 years ago

Discovering vulnerabilities quickly with targeted scanning - PRACTITIONER

Discovering vulnerabilities quickly with targeted scanning - PRACTITIONER AmirHossein Soltani

105 views - 2 years ago

JWT authentication bypass via flawed signature verification - APPRENTICE

JWT authentication bypass via flawed signature verification - APPRENTICE AmirHossein Soltani

17 views - 2 years ago

JWT authentication bypass via unverified signature - APPRENTICE

JWT authentication bypass via unverified signature - APPRENTICE AmirHossein Soltani

19 views - 2 years ago

Web shell upload via Content-Type restriction bypass - APPRENTICE

Web shell upload via Content-Type restriction bypass - APPRENTICE AmirHossein Soltani

80 views - 2 years ago

Remote code execution via web shell upload - APPRENTICE

Remote code execution via web shell upload - APPRENTICE AmirHossein Soltani

31 views - 2 years ago

Authentication bypass via OAuth implicit flow - APPRENTICE

Authentication bypass via OAuth implicit flow - APPRENTICE AmirHossein Soltani

16 views - 2 years ago

Host header authentication bypass - APPRENTICE

Host header authentication bypass - APPRENTICE AmirHossein Soltani

15 views - 2 years ago

Basic password reset poisoning - APPRENTICE

Basic password reset poisoning - APPRENTICE AmirHossein Soltani

33 views - 2 years ago

URL normalization - PRACTITIONER

URL normalization - PRACTITIONER AmirHossein Soltani

89 views - 2 years ago

Web cache poisoning via a fat GET request - PRACTITIONER

Web cache poisoning via a fat GET request - PRACTITIONER AmirHossein Soltani

37 views - 2 years ago

Parameter cloaking - PRACTITIONER

Parameter cloaking - PRACTITIONER AmirHossein Soltani

19 views - 2 years ago

Web cache poisoning via an unkeyed query parameter - PRACTITIONER

Web cache poisoning via an unkeyed query parameter - PRACTITIONER AmirHossein Soltani

20 views - 2 years ago

Web cache poisoning via an unkeyed query string - PRACTITIONER

Web cache poisoning via an unkeyed query string - PRACTITIONER AmirHossein Soltani

13 views - 2 years ago

Targeted web cache poisoning using an unknown header - PRACTITIONER

Targeted web cache poisoning using an unknown header - PRACTITIONER AmirHossein Soltani

23 views - 2 years ago

Web cache poisoning with multiple headers - PRACTITIONER

Web cache poisoning with multiple headers - PRACTITIONER AmirHossein Soltani

26 views - 2 years ago

Web cache poisoning with an unkeyed cookie - PRACTITIONER

Web cache poisoning with an unkeyed cookie - PRACTITIONER AmirHossein Soltani

17 views - 2 years ago

Web cache poisoning with an unkeyed header - PRACTITIONER

Web cache poisoning with an unkeyed header - PRACTITIONER AmirHossein Soltani

39 views - 2 years ago

Flawed enforcement of business rules - APPRENTICE

Flawed enforcement of business rules - APPRENTICE AmirHossein Soltani

10 views - 2 years ago

Inconsistent security controls - APPRENTICE

Inconsistent security controls - APPRENTICE AmirHossein Soltani

14 views - 2 years ago

Excessive trust in client-side controls - APPRENTICE

Excessive trust in client-side controls - APPRENTICE AmirHossein Soltani

11 views - 2 years ago

Authentication bypass via information disclosure - APPRENTICE

Authentication bypass via information disclosure - APPRENTICE AmirHossein Soltani

20 views - 2 years ago

Source code disclosure via backup files - APPRENTICE

Source code disclosure via backup files - APPRENTICE AmirHossein Soltani

14 views - 2 years ago

Information disclosure on debug page - APPRENTICE

Information disclosure on debug page - APPRENTICE AmirHossein Soltani

19 views - 2 years ago

Information disclosure in error messages - APPRENTICE

Information disclosure in error messages - APPRENTICE AmirHossein Soltani

19 views - 2 years ago

Modifying serialized objects - APPRENTICE

Modifying serialized objects - APPRENTICE AmirHossein Soltani

29 views - 2 years ago

Manipulating WebSocket messages to exploit vulnerabilities - APPRENTICE

Manipulating WebSocket messages to exploit vulnerabilities - APPRENTICE AmirHossein Soltani

158 views - 2 years ago

Password reset broken logic - APPRENTICE

Password reset broken logic - APPRENTICE AmirHossein Soltani

30 views - 2 years ago

2FA simple bypass - APPRENTICE

2FA simple bypass - APPRENTICE AmirHossein Soltani

100 views - 2 years ago

Username enumeration via different responses - APPRENTICE

Username enumeration via different responses - APPRENTICE AmirHossein Soltani

205 views - 2 years ago

Insecure direct object references - APPRENTICE

Insecure direct object references - APPRENTICE AmirHossein Soltani

14 views - 2 years ago

User ID controlled by request parameter with password disclosure - APPRENTICE

User ID controlled by request parameter with password disclosure - APPRENTICE AmirHossein Soltani

14 views - 2 years ago

User ID controlled by request parameter with data leakage in redirect - APPRENTICE

User ID controlled by request parameter with data leakage in redirect - APPRENTICE AmirHossein Soltani

8 views - 2 years ago

User ID controlled by request parameter, with unpredictable user IDs - APPRENTICE

User ID controlled by request parameter, with unpredictable user IDs - APPRENTICE AmirHossein Soltani

21 views - 2 years ago

User ID controlled by request parameter - APPRENTICE

User ID controlled by request parameter - APPRENTICE AmirHossein Soltani

17 views - 2 years ago

User role can be modified in user profile - APPRENTICE AmirHossein Soltani

24 views - 2 years ago

User role controlled by request parameter - APPRENTICE

User role controlled by request parameter - APPRENTICE AmirHossein Soltani

22 views - 2 years ago

Unprotected admin functionality with unpredictable URL - APPRENTICE

Unprotected admin functionality with unpredictable URL - APPRENTICE AmirHossein Soltani

19 views - 2 years ago

Unprotected admin functionality - APPRENTICE

Unprotected admin functionality - APPRENTICE AmirHossein Soltani

15 views - 2 years ago

Server-side template injection with information disclosure via user-supplied objects - PRACTITIONER

Server-side template injection with information disclosure via user-supplied objects - PRACTITIONER AmirHossein Soltani

5 views - 2 years ago

Server-side template injection in an unknown language with a documented exploit - PRACTITIONER

Server-side template injection in an unknown language with a documented exploit - PRACTITIONER AmirHossein Soltani

10 views - 2 years ago

Server-side template injection using documentation - PRACTITIONER

Server-side template injection using documentation - PRACTITIONER AmirHossein Soltani

10 views - 2 years ago

Basic server-side template injection (code context) - PRACTITIONER

Basic server-side template injection (code context) - PRACTITIONER AmirHossein Soltani

44 views - 2 years ago

Basic server-side template injection - PRACTITIONER

Basic server-side template injection - PRACTITIONER AmirHossein Soltani

13 views - 2 years ago

File path traversal simple case - APPRENTICE

File path traversal simple case - APPRENTICE AmirHossein Soltani

33 views - 2 years ago