<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/broken-authentication</loc>
    <lastmod>2026-01-18T14:32:02.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/bug-bounty-hunting-process</loc>
    <lastmod>2026-02-12T23:52:18.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/command-injections</loc>
    <lastmod>2026-01-12T22:30:28.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/cross-site-scripting-(xss)</loc>
    <lastmod>2025-12-10T19:40:43.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/documentation-and-reporting</loc>
    <lastmod>2025-12-11T17:10:07.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/file-inclusion</loc>
    <lastmod>2026-02-12T23:52:18.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/file-upload-attacks</loc>
    <lastmod>2026-01-07T16:33:30.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/getting-started</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/introduction-to-web-applications</loc>
    <lastmod>2025-12-11T17:10:07.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/javaScript-deobfuscation</loc>
    <lastmod>2025-12-09T17:00:11.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/login-brute-forcing</loc>
    <lastmod>2026-01-23T13:19:58.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/network-enumeration-with-nmap</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/penetration-testing-process</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/server-side-attacks</loc>
    <lastmod>2026-01-23T13:07:00.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/sql-injection-fundamentals</loc>
    <lastmod>2026-02-12T23:52:18.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/sqlmap-essentials</loc>
    <lastmod>2025-12-29T18:18:29.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/using-web-proxies</loc>
    <lastmod>2025-12-09T17:00:11.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/web-attacks</loc>
    <lastmod>2026-01-23T13:19:58.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/web-fuzzing</loc>
    <lastmod>2025-12-09T17:00:11.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/CPTS--and--CWES-Notes/web-requests</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/Machine-Write-ups/cypher</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/Machine-Write-ups/getsimple</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/HTB/Machine-Write-ups/nibbles</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/IT/challenge---public-information-custom-password-wordlist-luks-key-slots-and-decryption</loc>
    <lastmod>2026-01-12T22:26:34.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/IT/intel-hybrid-architecture-and-virtualization</loc>
    <lastmod>2026-02-12T23:52:18.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/IT/learning-with-ebios-rm</loc>
    <lastmod>2026-02-27T11:23:02.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/IT/understanding-block-level-encryption-on-linux</loc>
    <lastmod>2026-02-12T23:52:18.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/burpsuite-cheatsheet</loc>
    <lastmod>2025-12-09T17:00:11.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/curl</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/dns</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/ftp</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/google-dorks</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/nmap</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/osint-quick-wins</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/shells</loc>
    <lastmod>2026-01-04T21:28:09.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/smb</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/snmp</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/tmux</loc>
    <lastmod>2025-12-09T17:00:11.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Knowledge-Notes/web-enumeration</loc>
    <lastmod>2025-12-09T17:00:11.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Miscellaneous/benefits-of-using-eli5</loc>
    <lastmod>2025-09-30T12:00:11.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Miscellaneous/ne-toucher-qu-avec-les-yeux</loc>
    <lastmod>2026-02-12T23:52:18.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/csrf-vulnerability-with-no-defenses</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/csrf-where-referer-validation-depends-on-header-being-present</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/csrf-where-token-is-duplicated-in-cookie</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/csrf-where-token-is-not-tied-to-non-session-cookie</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/csrf-where-token-is-not-tied-to-user-session</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/csrf-where-token-validation-depends-on-request-method</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/csrf-where-token-validation-depends-on-token-being-present</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/csrf-with-broken-referer-validation</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/samesite-lax-bypass-via-cookie-refresh</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/samesite-lax-bypass-via-method-override</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/samesite-strict-bypass-via-client-side-redirect</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/CSRF/samesite-strict-bypass-via-sibling-domain</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/DOM-based-vulnerabilities/dom-based-open-redirection</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/HTTP-Host-header-attacks/routing-based-ssrf</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/HTTP-Host-header-attacks/ssrf-via-flawed-request-parsing</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/OAuth-authentication/authentication-bypass-via-oauth-implicit-flow</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/SSRF/basic-ssrf-against-another-back-end-system</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/SSRF/basic-ssrf-against-the-local-server</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/SSRF/blind-ssrf-with-out-of-band-detection</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/SSRF/blind-ssrf-with-shellshock-exploitation</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/SSRF/ssrf-with-blacklist-based-input-filter</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/SSRF/ssrf-with-filter-bypass-via-open-redirection-vulnerability</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/SSRF/ssrf-with-whitelist-based-input-filter</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/WebSockets/cross-site-websocket-hijacking</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/WebSockets/manipulating-websocket-messages-to-exploit-vulnerabilities</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/XSS/dom-xss-in-documentwrite-sink-using-source-locationsearch-inside-a-select-element</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/XSS/dom-xss-in-documentwrite-sink-using-source-locationsearch</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/XSS/dom-xss-in-innerhtml-sink-using-source-locationsearch</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/XSS/dom-xss-in-jquery-anchor-href-attribute-sink-using-locationsearch-source</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/XSS/dom-xss-in-jquery-selector-sink-using-a-hashchange-event</loc>
    <lastmod>2025-12-10T19:36:13.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/XSS/reflected-xss-into-html-context-with-nothing-encoded</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/XSS/stored-xss-into-html-context-with-nothing-encoded</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Portswigger-Labs/XXE/exploiting-xxe-to-perform-ssrf-attacks</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Road-to-Clouds/GCP/gcloud-cli</loc>
    <lastmod>2025-11-03T15:25:25.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Road-to-Clouds/GCP/gcp-auditing-methodology</loc>
    <lastmod>2026-02-12T23:52:18.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Road-to-Clouds/GCP/google-cloud-platform</loc>
    <lastmod>2026-01-12T22:17:39.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Road-to-Clouds/cloud-fundamentals</loc>
    <lastmod>2025-11-03T15:25:25.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Vulnerabilities/cross-site-scripting</loc>
    <lastmod>2025-12-10T19:38:38.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Vulnerabilities/server-side-request-forgery</loc>
    <lastmod>2026-01-17T21:49:16.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/Vulnerabilities/sql-injection</loc>
    <lastmod>2026-01-07T16:21:07.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/hack-the-box</loc>
    <lastmod>2026-01-23T13:19:58.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/</loc>
    <lastmod>2026-02-12T23:52:18.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/rootme</loc>
    <lastmod>2025-11-18T23:06:35.000Z</lastmod>
  </url><url>
    <loc>https://haft.fr/websecurity-academy</loc>
    <lastmod>2025-12-11T17:22:31.000Z</lastmod>
  </url></urlset>