THM: SQHell

Web challenge working through authentication bypass, header-based blind SQL injection, UNION-based extraction, and a second-order SQL injection.

August 9, 2026 · 8 min

THM: Hammer

Web application challenge chaining OTP brute forcing, a rate-limit bypass, JWT key manipulation, and remote command execution.

July 29, 2026 · 7 min