Web App Security

Labs, writeups and notes on finding and exploiting web vulnerabilities.

• Like It's Lunch

  My own practice lab: real-world vulnerabilities rebuilt from scratch, then broken down into simple analogies about lunch. (1 posts)

• PortSwigger

  Web Security Academy labs: SQLi, auth, SSRF, XXE, XSS and more. (30 posts)

• HackTheBox

  Vulnerable box writeups. (13 posts)

• OWASP / WebGoat

  OWASP Top 10 walkthroughs. (10 posts)