Intigriti

Prototype Pollution, reCAPTCHA and XSS - Solution to June '23 Challenge

Exploiting Server-side Parameter Pollution in a Query String

DOM Clobbering, CSPP (axios) and XSS - Unintended Solutions to January '24 Challenge

Intel's 1337UP Knights of Elektron Live Hacking Event Aftermovie

Cheat Engine: Introduction (tutorial 1-4) - Game Hacking Series

Exploiting Time-sensitive Vulnerabilities

Web Shell via Polyglot File Upload!

Proxying Android Traffic through Burp Suite (incl credential fuzzing & IDORs)

SQL Injection to Retrieve Hidden Data!

Introduction to Android Hacking

Cheat Engine: Code Finder (tutorial 5) - Game Hacking Series

SSRF in 100 seconds

Enumerating 100 targets at once! Meg - Hacker Tools

Leveraging Server Side XSS (PDF) for Auth Bypass - "My Music" [INTIGRITI 1337UP LIVE CTF 2023]

Cheat Engine: Pointer Scanning (tutorial 6, part 2) - Game Hacking Series

Cheat Engine: Cheat Table Framework Code (tutorial 7, part 2) - Game Hacking Series

Exploiting a Mass Assignment Vulnerability

Caido - Hacker Tools

Meet Stijn Jans, Intigriti's Founder

Bypassing Rate Limits via Race Conditions

JWT Authentication Bypass via Algorithm Confusion

Multi-endpoint Race Conditions

Understanding Scope, Ethics and Code of Conduct (CoC)

How To Search For CSRF!

JWT Authentication Bypass via jku Header Injection

Intigriti’s Hybrid Pentest: Penetration Testing as a Service reimagined

Single-endpoint Race Conditions

Hack EVERY API! KiteRunner - Hacker Tools

Web Shell Upload via Obfuscated File Extension

Hacker Tools - CyberChef

Overflows in PHP?! Solution to March '22 XSS Challenge

Blind Command Injection (in a slim docker container) - Solution to July '23 Challenge

SQL injection with Filter Bypass via XML Encoding

XSS via CSPT and Open Redirect - Solution to August '24 Challenge (Defcon)

Accidental Exposure of Private GraphQL Fields

XSS for beginners - Google XSS Game Levels 1 & 2​

DOM XSS in jQuery Selector Sink using a Hashchange Event

How File Upload Vulnerabilities Work!

2 ways to root an AVD (android studio); Magisk (rootAVD) and SuperSU

Web Shell via Denylist Bypass!

How to exploit a blind SSRF?

Web Shell Upload via Path Traversal

Intigriti Customer Story: Microsoft

Cheat Engine: Code Injection (tutorial 7, part 1) - Game Hacking Series

Intigriti Customer Story: Kinepolis Improves IT Security through Global Network of Researchers

Web Shell Upload via Race Condition

How to run an XXE injection via an SVG Image Upload!

Cheat Engine: Pointers (tutorial 6, part 1) - Game Hacking Series

XSSHUNTER by @IAmMandatory (Behind The Tool #2)

Decoding Spotify Barcodes - Defcon 32 Coin Challenge Solution [2024]

Web Shell Upload via Content-Type Restriction Bypass