Proving Grounds is Offensive Security’s practice lab platform. This is a writeup for CVE-2025-27136, rated Intermediate with no community rating. It involves exploiting an XML parsing vulnerability...

Proving Grounds is Offensive Security’s practice lab platform. This is a writeup for Needle, rated Intermediate with no community rating. It involves exploiting an XSS vulnerability in an SVG image...

Proving Grounds is Offensive Security’s practice lab platform. This is a writeup for SpringAuth_attack, rated Intermediate with a community rating of “Very Hard.” It involves exploiting a real CVE ...

Direct syscalls are a common topic in offensive security, especially when talking about EDR evasion. Many common Windows API calls that are useful for executing processes are hooked and monitored ...