BugForge
Hands-on challenge writeups - broken access control, IDOR, XSS, SQLi, XXE, SSRF, business logic. Real exploitation paths, start to finish.
root@johnmatrix:~$ ls ./bugforge/ | wc -l → 41
41 writeups
Cheesy Does It
Severity: Medium
Cheesy Does It - Broken Logic
Severity: Medium
Cheesy Does It - XSS
Severity: Critical
Copy Pasta - Broken Access
Severity: High
Copy Pasta - SQLi
Severity: Critical
CopyPasta
Severity: High
FurHire - CSPT to ATO + 2FA Bypass
Severity: Critical
FurHire - Open Redirect + CSPT to XSS + Token Replay
Severity: High
FurHire - SSRF
Severity: High
FurHire - XSS
Severity: High
Galaxy Dash - File Access
Severity: Critical
Galaxy Dash - IDOR
Severity: Critical
Galaxy Dash - Prototype Pollution
Severity: Critical
Galaxy Dash - Template Injection
Severity: Critical
HackersParadise - SSRF
Severity: High
MedNode - SQLi
Severity: Critical
MesaNet - HARD
Severity: High
MesaNet - WAF & SSRF
Severity: Critical
MesaNet - Weekly
Severity: Critical
Ottergram
Severity: High
Ottergram - BAC
Severity: High
Ottergram - IDOR
Severity: High
Ottergram - WebSocket IDOR
Severity: High
Ottergram - XSS
Severity: High
Shady Oaks - Claude Way
Severity: High
Shady Oaks Financial
Severity: High
Shady Oaks Financial - 2
Severity: High
Shady Oaks Financial - 3
Severity: Medium
Sokudo
Severity: High
Sokudo - BAC
Severity: High
Sokudo - BAC
Severity: High
Sokudo - JWT alg:none on Legacy API
Severity: High
Tanuki
Severity: High
Tanuki - Access Control
Severity: Critical
Tanuki - IDOR
Severity: Critical
Tanuki - Mass Assign
Severity: High
Tanuki - Stats IDOR
Severity: Critical
Tanuki - XXE
Severity: Critical
Vaultly - Middleware Bypass
Severity: Critical
Vaultly - Prototype Pollution
Severity: Critical
WordMess - wp2shell Batch Route Confusion
Severity: Critical
No writeups found. Try a different search.