#portswigger-lab

User ID controlled by request parameter — PortSwigger

Challenge link:

PortSwigger XSS Labs Walkthrough: Reflected, Stored, DOM & CSP Bypass

Exploiting AI Agents to Exfiltrate Sensitive Information — PortSwigger Lab Writeup

Lab: Exploiting AI agents to exfiltrate sensitive information Difficulty: Apprentice Category: LLM Attacks — Indirect Prompt Injection

Exploiting AI Agents to Perform Destructive Actions — PortSwigger Lab Writeup

Lab: Exploiting AI agents to perform destructive actions Difficulty: Apprentice Category: LLM Attacks — Indirect Prompt Injection

Accessing another user’s API key by changing the username parameter

Platform: PortSwigger Web Security Academy

Web Security Lab — Unprotected Admin Functionality | PortSwigger Apprentice

No login form to break, no injection point to fuzz — the entire vulnerability here was that the admin panel simply wasn’t checking who was…

PortSwigger Lab: Unprotected Admin Functionality — Solution

Before diving directly into the lab, let’s first understand the basics of Access Control.

Exploiting AI agents to trigger secondary vulnerabilities

Hi, I’m Ahmed Gamal. A Mid.Sr Penetration Tester @ Zerosploit MEA.

ACCESS CONTROL VULNERABILITIES: Solving Portswigger web securities Labs 4–6.

Access control is the application of constraints on who or what is authorized to perform actions or access resources. In the context of web…

PortSwigger Lab: CORS vulnerability with trusted null origin

Lab Description: This website has an insecure CORS configuration in that it trusts the “null” origin.

PortSwigger Lab: File path traversal, simple case

Prerequisites:

Path Traversal

🔐 Path Traversal — Web Security من الثغرات المهمة جدًا في Web Application Security، وخصوصًا لأي حد بيتعلم Web Pentesting أو Bug Bounty…

Visible error-based SQL injection Lab

This is a walkthrough of PortSwigger Lab: Visible error-based SQL injection lab.

Blind SQL Injection With Conditional Errors Lab

This is a walkthrough of the portswigger lab: Blind SQL Injection With Conditional Errors.

Portswigger -Server-side template injection with a custom exploit

In this lab i was able to gain knowledge in bypassing server side template injection(SSTI) using custom payload and methodolagy.

Web Cache Poisoning

Web cache poisoning with an unkeyed header

🎭 LAB: Blind SQL Injection with Conditional Responses

🧠 Início da jornada

BunkerMarket: Building a Maritime Energy Intelligence Layer for a Changing Industry

The global bunkering and marine fuels industry is undergoing one of the fastest structural shifts in its history.

Path Traversal

Path traversal is also known as directory traversal. These vulnerabilities enable an attacker to read arbitrary files on the server that is…

Information disclosure in version control history | Lab-05

portswigger Lab

Authentication bypass via information disclosure | Lab-04

portswigger lab

Source code disclosure via backup files | Lab-03

portswiger lab

Information disclosure on debug page APPRENTICE | Lab -02

portswigger Lab

Day 4 of PortSwigger Academy Lab Walkthrough: CORS & XXE injection

Focuses on solving all apprentice levels of CORS & XXE injection

Portswigger walkthrough(JWT)(apprentice)

Lab: JWT authentication bypass via unverified signature

PORTSWIGGER Cross-site scripting Labs (APPRENTICE level) Walkthrough

by Dayan Hesara

Lab: SQL injection vulnerability allowing login bypass | Portswigger

ห้องปฏิบัติการนี้มีช่องโหว่ด้าน SQL Injection ในฟังก์ชันการเข้าสู่ระบบ