FINALLY PASSED THE CPTS! 12/14 flags. 10 days of exam. Almost a month of waiting, and its finally here. I mean, I dreamt of this for days and now I have no words. Will publish a review and a detailed tips and tricks blog this week. PS Tagging all my frens below...

I completed the Web Security Academy lab: Exploiting XXE via image file upload @WebSecAcademy

I completed the Web Security Academy lab: Exploiting XInclude to retrieve files @WebSecAcademy

I completed the Web Security Academy lab: Exploiting blind XXE to retrieve data via error messages @WebSecAcademy

I completed the Web Security Academy lab: Exploiting blind XXE to exfiltrate data using a malicious external DTD @WebSecAcademy

I completed the Web Security Academy lab: Blind XXE with out-of-band interaction @WebSecAcademy

I completed the Web Security Academy lab: Exploiting XXE to perform SSRF attacks @WebSecAcademy

I completed the Web Security Academy lab: Exploiting XXE using external entities to retrieve files @WebSecAcademy

Day 49: Was out the entire day so did nothing. Will finish all the remaining server side vulns next week.

Day 48: Solved the remaining SSRF labs on portswigger. Published the walkthrough -

I completed the Web Security Academy lab: Blind SSRF with Shellshock exploitation @WebSecAcademy

I completed the Web Security Academy lab: SSRF with filter bypass via open redirection vulnerability @WebSecAcademy

I completed the Web Security Academy lab: SSRF with blacklist-based input filter @WebSecAcademy

I completed the Web Security Academy lab: Blind SSRF with out-of-band detection @WebSecAcademy

Day 47: Finished reading about SSRF. Solved 2/7 labs for it. Will solve the rest tomorrow and publish the walkthrough.

I completed the Web Security Academy lab: Basic SSRF against another back-end system @WebSecAcademy

I completed the Web Security Academy lab: Basic SSRF against the local server @WebSecAcademy

Day 46: Finished Race Conditions - all 6 labs. Published the walkthrough -

I completed the Web Security Academy lab: Partial construction race conditions @WebSecAcademy

I completed the Web Security Academy lab: Single-endpoint race conditions @WebSecAcademy

I completed the Web Security Academy lab: Multi-endpoint race conditions @WebSecAcademy