PortSwigger Labs
PRACTICE . EXPLOIT . MASTER
Web Security Knowledge Base
Welcome to my personal cybersecurity knowledge base, where I document practical labs, vulnerability research, exploitation techniques, and defensive concepts while studying web application security.
Web Application Security
| Lab | View |
|---|---|
| SQL Injection | View |
| NoSQL Injection | View |
| Cross-Site Scripting (XSS) | View |
| DOM-Based Vulnerabilities | View |
| Cross-Site Request Forgery (CSRF) | View |
| Cross-Origin Resource Sharing (CORS) | View |
| XML External Entity (XXE) Injection | View |
| Server-Side Request Forgery (SSRF) | View |
| Server-Side Template Injection (SSTI) | View |
| OS Command Injection | View |
| Path Traversal | View |
| File Upload Vulnerabilities | View |
Authentication & Authorization
| Lab | View |
|---|---|
| Authentication | View |
| Access Control Vulnerabilities | View |
| OAuth Vulnerabilities | View |
| JWT | View |
| Business Logic Vulnerabilities | View |
HTTP & Browser Security
| Lab | View |
|---|---|
| HTTP Host Header Attacks | View |
| HTTP Request Smuggling | View |
| Clickjacking | View |
| Information Disclosure | View |
| WebSockets | View |
Caching & Serialization
Learning Resources
| Resource | View |
|---|---|
| Essential Skills | View |
| PortSwigger Lab Writeups | View |
| Practical Exploitation Notes | View |
| Security Research | View |
| Tips & Tricks | View |
“Learning cybersecurity through hands-on labs, real-world scenarios, and continuous experimentation.”
Current Focus
- Web Application Security
- Offensive Security
- Secure Development
- Vulnerability Research
- Bug Bounty Methodology