https://k0z1l.github.io/writeups/portswigger-csrf/lab-07-samesite-lax-bypass-via-method-override/2026-10-09T00:00:00+00:00daily0.5https://k0z1l.github.io/2026-10-09T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/2026-10-09T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-csrf/lab-05-csrf-where-token-is-tied-to-non-session-cookie/2026-10-08T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-csrf/lab-06-csrf-where-token-is-duplicated-in-cookie/2026-10-08T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-csrf/lab-01-csrf-vulnerability-with-no-defenses/2026-10-07T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-csrf/lab-02-csrf-where-token-validation-depends-on-request-method/2026-10-07T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-csrf/lab-03-csrf-where-token-validation-depends-on-token-being-present/2026-10-07T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-csrf/lab-04-csrf-where-token-is-not-tied-to-user-session/2026-10-07T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-csrf/2026-10-06T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-22-http-request-smuggling-0.cl-request-smuggling/2026-10-06T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-19-http-request-smuggling-web-cache-poisoning-via-h2-request-tunnelling/2026-10-05T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-20-http-request-smuggling-client-side-desync/2026-10-05T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-21-http-request-smuggling-server-side-pause-based-request-smuggling/2026-10-05T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-14-http-request-smuggling-h2-request-splitting-via-crlf-injection/2026-10-04T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-15-http-request-smuggling-cl.0-request-smuggling/2026-10-04T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-16-http-request-smuggling-exploiting-http-request-smuggling-to-perform-web-cache-poisoning/2026-10-04T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-17-http-request-smuggling-exploiting-http-request-smuggling-to-perform-web-cache-deception/2026-10-04T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-18-http-request-smuggling-bypassing-access-controls-via-h2-request-tunnelling/2026-10-04T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-12-http-request-smuggling-h2.cl-request-smuggling/2026-10-03T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-13-http-request-smuggling-h2-request-smuggling-via-crlf-injection/2026-10-03T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-ai-ml-sec/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-blockchain/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-crypto/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-forensics/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-misc/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-osint/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-pwn/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-re/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-stegano/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/cssctf-web/2026-10-02T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-10-http-request-smuggling-delivering-reflected-xss/2026-09-30T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-11-http-request-smuggling-response-queue-poisoning-via-h2.te-request-smuggling/2026-09-30T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-09-http-request-smuggling-capturing-other-users-requests/2026-09-30T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-05-http-request-smuggling-confirming-a-te.cl-vulnerability-via-differential-responses/2026-09-29T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-06-http-request-smuggling-bypassing-front-end-security-controls-cl.te-vulnerability/2026-09-29T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-07-http-request-smuggling-bypassing-front-end-security-controls-te.cl-vulnerability/2026-09-29T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-08-http-request-smuggling-revealing-front-end-request-rewriting/2026-09-29T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-04-http-request-smuggling-confirming-a-cl.te-vulnerability-via-differential-responses/2026-09-28T00:00:00+00:00daily0.5https://k0z1l.github.io/notes/client-side-vs-server-side/2026-09-28T00:00:00+00:00daily0.5https://k0z1l.github.io/notes/2026-09-28T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/2026-09-22T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-01-http-request-smuggling-basic-cl.te-vulnerability/2026-09-22T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-02-http-request-smuggling-basic-te.cl-vulnerability/2026-09-22T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-03-http-request-smuggling-obfuscating-the-te-header/2026-09-22T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/2026-09-14T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-01-basic-password-reset-poisoning/2026-09-14T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-02-host-header-authentication-bypass/2026-09-14T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-03-web-cache-poisoning-via-ambiguous-requests/2026-09-14T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-04-routing-based-ssrf/2026-09-14T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-05-ssrf-via-flawed-request-parsing/2026-09-14T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-06-host-validation-bypass-via-connection-state-attack/2026-09-14T00:00:00+00:00daily0.5https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-07-password-reset-poisoning-via-dangling-markup/2026-09-14T00:00:00+00:00daily0.5https://k0z1l.github.io/about/2026-09-13T00:00:00+00:00daily0.5