Intigriti

Prototype Pollution, reCAPTCHA and XSS - Solution to June '23 Challenge

How To Circumvent CSRF Protection!

Stored XSS Simplified!

Fuzzing for beginners! FFuF - Hacker Tools

Hacker Tools - CyberChef

Exploiting Server-side Parameter Pollution in a REST URL

Web Shell Upload via Obfuscated File Extension

How To Search For CSRF!

How To Search For SSRF!

How File Upload Vulnerabilities Work!

Decoding Spotify Barcodes - Defcon 32 Coin Challenge Solution [2024]

Web Shell Upload via Path Traversal

Hacker Tools - How to install XSSHunter

How to run an XXE injection via an SVG Image Upload!

SQL injection with Filter Bypass via XML Encoding

Cheat Engine: Pointers (tutorial 6, part 1) - Game Hacking Series

Exploiting Server-side Parameter Pollution in a Query String

DOM Clobbering, CSPP (axios) and XSS - Unintended Solutions to January '24 Challenge

Intel's 1337UP Knights of Elektron Live Hacking Event Aftermovie

Cheat Engine: Introduction (tutorial 1-4) - Game Hacking Series

Exploiting Time-sensitive Vulnerabilities

Web Shell via Polyglot File Upload!

Proxying Android Traffic through Burp Suite (incl credential fuzzing & IDORs)

SQL Injection to Retrieve Hidden Data!

Introduction to Android Hacking

Cheat Engine: Code Finder (tutorial 5) - Game Hacking Series

SSRF in 100 seconds

Enumerating 100 targets at once! Meg - Hacker Tools

Leveraging Server Side XSS (PDF) for Auth Bypass - "My Music" [INTIGRITI 1337UP LIVE CTF 2023]

Time-Based Blind SQL Injection!

Web Shell Upload via Content-Type Restriction Bypass

Indirect Prompt Injection

Limit Overrun Race Conditions

Introduction to GraphQL Attacks

Accessing Private GraphQL Posts

Intigriti Kick off 2024

Second order NoSQL injection? - Solution to January '23 Challenge

Intigriti Customer Story: Microsoft

Exploiting an API Endpoint using Documentation

Aggressive Scanning in Bug Bounty (and how to avoid it)

Intigriti HackerViews 🎙️ - Meet your Bug Bounty Heroes - nnedelchev

UNION SQL Injection to Extract Data From Other Tables!

Exploiting Vulnerabilities in LLM APIs

Prototype Poisoning and Unicode Case Mapping Collision - Solution to March '24 Challenge

Intigriti Customer Story: Personio

Exploiting Insecure Output Handling in LLMs

Misconfig Mapper - Hacker Tools

2 ways to root an AVD (android studio); Magisk (rootAVD) and SuperSU