PortSwigger
Web Security Academy labs: SQLi, auth, SSRF, XXE, XSS and more.
- What is SQL Injection?
- SQLi UNION Attacks
- Blind SQLi With Conditional Responses
- Blind SQLi With Conditional Errors
- Visible Error-Based SQLi
- Blind SQLi With Time Delays
- Blind SQLi With Out Of Band Techniques
- SQLi Examining The Database
- Authentication: Vulnerabilities In Password Based Login; Brute-Force Attacks
- Authentication: Vulnerabilities In Password Based Login; Flawed Brute-Force Protection
- Authentication: Vulnerabilities In Multi-Factor Authentication
- Authentication: Vulnerabilities In Other Authentication Mechanisms
- Directory Traversal
- OS Command Injection
- Business Logic Vulnerabilities; Excessive Trust
- Business Logic Vulnerabilities; Flawed Assumptions
- Business Logic Vulnerabilities; Domain Specific Flaws
- Information Disclosure
- Access Control; Vertical Privilege Escalation
- Access Control; Horizontal Privilege Escalation
- Access Control; Context-Depedent Controls
- File Upload Vulnerabilities
- Race Conditions
- Race Conditions Continued
- Server Side Request Forgery
- Blind Server Side Request Forgery
- XXE Injection
- Blind XXE Injection
- Cross-Site Scripting; Exploitation
- Reflected XSS; Part 1