Pasindu's Blog

Tag: PortSwigger

201 items with this tag.

Jul 05, 2026
Remote code execution via polyglot web shell upload
- PortSwigger
Jul 05, 2026
Remote code execution via web shell upload
- PortSwigger
Jul 05, 2026
Web shell upload via Content-Type restriction bypass
- PortSwigger
Jul 05, 2026
Web shell upload via extension blacklist bypass
- PortSwigger
Jul 05, 2026
Web shell upload via obfuscated file extension
- PortSwigger
Jul 05, 2026
Web shell upload via path traversal
- PortSwigger
Jul 05, 2026
Basic password reset poisoning
- PortSwigger
Jul 05, 2026
Host header authentication bypass
- PortSwigger
Jul 05, 2026
Host validation bypass via connection state attack
- PortSwigger
Jul 05, 2026
Password reset poisoning via dangling markup
- PortSwigger
Jul 05, 2026
Web cache poisoning via ambiguous requests
- PortSwigger
Jul 05, 2026
Authentication bypass via information disclosure
- PortSwigger
Jul 05, 2026
Exploiting Java deserialization with Apache Commons
- PortSwigger
Jul 05, 2026
Exploiting PHP deserialization with a pre-built gadget chain
- PortSwigger
Jul 05, 2026
Exploiting Ruby deserialization using a documented gadget chain
- PortSwigger
Jul 05, 2026
Information disclosure in error messages
- PortSwigger
Jul 05, 2026
Information disclosure in version control history
- PortSwigger
Jul 05, 2026
Information disclosure on debug page
- PortSwigger
Jul 05, 2026
Source code disclosure via backup files
- PortSwigger
Jul 05, 2026
Arbitrary object injection in PHP
- PortSwigger
Jul 05, 2026
Modifying serialized objects
- PortSwigger
Jul 05, 2026
Using application functionality to exploit insecure deserialization
- PortSwigger
Jul 05, 2026
JWT authentication bypass via algorithm confusion with no exposed key
- PortSwigger
Jul 05, 2026
JWT authentication bypass via algorithm confusion
- PortSwigger
Jul 05, 2026
JWT authentication bypass via flawed signature verification
- PortSwigger
Jul 05, 2026
JWT authentication bypass via jku header injection
- PortSwigger
Jul 05, 2026
JWT authentication bypass via jwk header injection
- PortSwigger
Jul 05, 2026
JWT authentication bypass via kid header path traversal
- PortSwigger
Jul 05, 2026
JWT authentication bypass via unverified signature
- PortSwigger
Jul 05, 2026
JWT authentication bypass via weak signing key
- PortSwigger
Jul 05, 2026
Detecting NoSQL injection
- PortSwigger
Jul 05, 2026
Exploiting NoSQL injection to extract data
- PortSwigger
Jul 05, 2026
Exploiting NoSQL operator injection to bypass authentication
- PortSwigger
Jul 05, 2026
Exploiting NoSQL operator injection to extract unknown fields
- PortSwigger
Jul 05, 2026
Authentication bypass via OAuth implicit flow
- PortSwigger
Jul 05, 2026
Forced OAuth profile linking
- PortSwigger
Jul 05, 2026
OAuth account hijacking via redirect_uri
- PortSwigger
Jul 05, 2026
Stealing OAuth access tokens via an open redirect
- PortSwigger
Jul 05, 2026
Blind OS command injection with output redirection
- PortSwigger
Jul 05, 2026
Blind OS command injection with time delays
- PortSwigger
Jul 05, 2026
OS command injection, simple case
- PortSwigger
Jul 05, 2026
File path traversal, simple case
- PortSwigger
Jul 05, 2026
File path traversal, traversal sequences blocked with absolute path bypass
- PortSwigger
Jul 05, 2026
File path traversal, traversal sequences stripped non-recursively
- PortSwigger
Jul 05, 2026
File path traversal, traversal sequences stripped with superfluous URL-decode
- PortSwigger
Jul 05, 2026
File path traversal, validation of file extension with null byte bypass
- PortSwigger
Jul 05, 2026
File path traversal, validation of start of path
- PortSwigger
Jul 05, 2026
Blind SQL injection with conditional errors
- PortSwigger
Jul 05, 2026
Blind SQL injection with conditional responses
- PortSwigger
Jul 05, 2026
Blind SQL injection with time delays and information retrieval
- PortSwigger
Jul 05, 2026
Blind SQL injection with time delays
- PortSwigger
Jul 05, 2026
SQL injection UNION attack, determining the number of columns returned by the query
- PortSwigger
Jul 05, 2026
SQL injection UNION attack, finding a column containing text
- PortSwigger
Jul 05, 2026
SQL injection UNION attack, retrieving data from other tables
- PortSwigger
Jul 05, 2026
SQL injection UNION attack, retrieving multiple values in a single column
- PortSwigger
Jul 05, 2026
SQL injection attack, listing the database contents on Oracle
- PortSwigger
Jul 05, 2026
SQL injection attack, listing the database contents on non-Oracle databases
- PortSwigger
Jul 05, 2026
SQL injection attack, querying the database type and version on MySQL and Microsoft
- PortSwigger
Jul 05, 2026
SQL injection attack, querying the database type and version on Oracle
- PortSwigger
Jul 05, 2026
SQL injection vulnerability allowing login bypass
- PortSwigger
Jul 05, 2026
SQL injection with filter bypass via XML encoding
- PortSwigger
Jul 05, 2026
Visible error-based SQL injection
- PortSwigger
Jul 05, 2026
Basic SSRF against another back-end system
- PortSwigger
Jul 05, 2026
Basic SSRF against the local server
- PortSwigger
Jul 05, 2026
SSRF with blacklist-based input filter
- PortSwigger
Jul 05, 2026
SSRF with filter bypass via open redirection vulnerability
- PortSwigger
Jul 05, 2026
SSRF with whitelist-based input filter
- PortSwigger
Jul 05, 2026
Basic server-side template injection (code context)
- PortSwigger
Jul 05, 2026
Basic server-side template injection
- PortSwigger
Jul 05, 2026
Server-side template injection in a sandboxed environment
- PortSwigger
Jul 05, 2026
Server-side template injection in an unknown language with a documented exploit
- PortSwigger
Jul 05, 2026
Server-side template injection using documentation
- PortSwigger
Jul 05, 2026
Server-side template injection with information disclosure via user-supplied objects
- PortSwigger
Jul 05, 2026
Combining web cache poisoning vulnerabilities
- PortSwigger
Jul 05, 2026
Internal cache poisoning
- PortSwigger
Jul 05, 2026
Parameter cloaking
- PortSwigger
Jul 05, 2026
Targeted web cache poisoning using an unknown header
- PortSwigger
Jul 05, 2026
URL normalization
- PortSwigger
Jul 05, 2026
Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria
- PortSwigger
Jul 05, 2026
Web cache poisoning via a fat GET request
- PortSwigger
Jul 05, 2026
Web cache poisoning via an unkeyed query parameter
- PortSwigger
Jul 05, 2026
Web cache poisoning via an unkeyed query string
- PortSwigger
Jul 05, 2026
Web cache poisoning with an unkeyed cookie
- PortSwigger
Jul 05, 2026
Web cache poisoning with an unkeyed header
- PortSwigger
Jul 05, 2026
Web cache poisoning with multiple headers
- PortSwigger
Jul 05, 2026
Exploiting cache server normalization for web cache deception
- PortSwigger
Jul 05, 2026
Exploiting origin server normalization for web cache deception
- PortSwigger
Jul 05, 2026
Exploiting path delimiters for web cache deception
- PortSwigger
Jul 05, 2026
Exploiting path mapping for web cache deception
- PortSwigger
Jul 05, 2026
Manipulating WebSocket messages to exploit vulnerabilities
- PortSwigger
Jul 05, 2026
Manipulating the WebSocket handshake to exploit vulnerabilities
- PortSwigger
Jul 05, 2026
Exploiting XInclude to retrieve files
- PortSwigger
Jul 05, 2026
Exploiting XXE to perform SSRF attacks
- PortSwigger
Jul 05, 2026
Exploiting XXE to retrieve data by repurposing a local DTD
- PortSwigger
Jul 05, 2026
Exploiting XXE using external entities to retrieve files
- PortSwigger
Jul 05, 2026
Exploiting XXE via image file upload
- PortSwigger
Jul 05, 2026
Exploiting blind XXE to retrieve data via error messages
- PortSwigger
Jul 05, 2026
Clobbering DOM attributes to bypass HTML filters
- PortSwigger
Jul 05, 2026
DOM XSS using web messages and JSON.parse
- PortSwigger
Jul 05, 2026
DOM XSS using web messages and a JavaScript URL
- PortSwigger
Jul 05, 2026
DOM XSS using web messages
- PortSwigger
Jul 05, 2026
DOM-based cookie manipulation
- PortSwigger
Jul 05, 2026
DOM-based open redirection
- PortSwigger
Jul 05, 2026
Exploiting DOM clobbering to enable XSS
- PortSwigger
Jul 05, 2026
2FA broken logic
- PortSwigger
Jul 05, 2026
Broken brute-force protection, IP block
- PortSwigger
Jul 05, 2026
Broken brute-force protection, multiple credentials per request
- PortSwigger
Jul 05, 2026
Offline password cracking
- PortSwigger
Jul 05, 2026
Password brute-force via password change
- PortSwigger
Jul 05, 2026
Password reset broken logic
- PortSwigger
Jul 05, 2026
Password reset poisoning via middleware
- PortSwigger
Jul 05, 2026
Username enumeration via response timing
- PortSwigger
Jul 05, 2026
Username enumeration via subtly different responses
- PortSwigger
Jul 05, 2026
Authentication bypass via flawed state machine
- PortSwigger
Jul 05, 2026
Excessive trust in client-side controls
- PortSwigger
Jul 05, 2026
Flawed enforcement of business rules
- PortSwigger
Jul 05, 2026
High-level logic vulnerability
- PortSwigger
Jul 05, 2026
Inconsistent handling of exceptional input
- PortSwigger
Jul 05, 2026
Inconsistent security controls
- PortSwigger
Jul 05, 2026
Insufficient workflow validation
- PortSwigger
Jul 05, 2026
Low-level logic flaw
- PortSwigger
Jul 05, 2026
Weak isolation on dual-use endpoint
- PortSwigger
Jul 05, 2026
Basic clickjacking with CSRF token protection
- PortSwigger
Jul 05, 2026
Clickjacking with a frame buster script
- PortSwigger
Jul 05, 2026
Clickjacking with form input data prefilled from a URL parameter
- PortSwigger
Jul 05, 2026
Exploiting clickjacking vulnerability to trigger DOM-based XSS
- PortSwigger
Jul 05, 2026
Multistep clickjacking
- PortSwigger
Jul 05, 2026
CORS vulnerability with basic origin reflection
- PortSwigger
Jul 05, 2026
CORS vulnerability with trusted insecure protocols
- PortSwigger
Jul 05, 2026
CORS vulnerability with trusted null origin
- PortSwigger
Jul 05, 2026
CSRF vulnerability with no defenses
- PortSwigger
Jul 05, 2026
CSRF where Referer validation depends on header being present
- PortSwigger
Jul 05, 2026
CSRF where token is duplicated in cookie
- PortSwigger
Jul 05, 2026
CSRF where token is not tied to user session
- PortSwigger
Jul 05, 2026
CSRF where token is tied to non-session cookie
- PortSwigger
Jul 05, 2026
CSRF where token validation depends on request method
- PortSwigger
Jul 05, 2026
CSRF where token validation depends on token being present
- PortSwigger
Jul 05, 2026
CSRF with broken Referer validation
- PortSwigger
Jul 05, 2026
SameSite Lax bypass via cookie refresh
- PortSwigger
Jul 05, 2026
SameSite Lax bypass via method override
- PortSwigger
Jul 05, 2026
SameSite Strict bypass via client-side redirect
- PortSwigger
Jul 05, 2026
DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded
- PortSwigger
Jul 05, 2026
DOM XSS in document.write sink using source location.search inside a select element
- PortSwigger
Jul 05, 2026
DOM XSS in document.write sink using source location.search
- PortSwigger
Jul 05, 2026
DOM XSS in innerHTML sink using source location.search
- PortSwigger
Jul 05, 2026
DOM XSS in jQuery anchor href attribute sink using location.search source
- PortSwigger
Jul 05, 2026
DOM XSS in jQuery selector sink using a hashchange event
- PortSwigger
Jul 05, 2026
Exploiting XSS to bypass CSRF defenses
- PortSwigger
Jul 05, 2026
Reflected DOM XSS
- PortSwigger
Jul 05, 2026
Reflected XSS in canonical link tag
- PortSwigger
Jul 05, 2026
Reflected XSS into HTML context with all tags blocked except custom ones
- PortSwigger
Jul 05, 2026
Reflected XSS into HTML context with most tags and attributes blocked
- PortSwigger
Jul 05, 2026
Reflected XSS into HTML context with nothing encoded
- PortSwigger
Jul 05, 2026
Reflected XSS into a JavaScript string with angle brackets HTML encoded
- PortSwigger
Jul 05, 2026
Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped
- PortSwigger
Jul 05, 2026
Reflected XSS into a JavaScript string with single quote and backslash escaped
- PortSwigger
Jul 05, 2026
Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped
- PortSwigger
Jul 05, 2026
Reflected XSS into attribute with angle brackets HTML-encoded
- PortSwigger
Jul 05, 2026
Reflected XSS with AngularJS sandbox escape and CSP
- PortSwigger
Jul 05, 2026
Reflected XSS with AngularJS sandbox escape without strings
- PortSwigger
Jul 05, 2026
Reflected XSS with some SVG markup allowed
- PortSwigger
Jul 05, 2026
Stored DOM XSS
- PortSwigger
Jul 05, 2026
Stored XSS into HTML context with nothing encoded
- PortSwigger
Jul 05, 2026
Stored XSS into anchor href attribute with double quotes HTML-encoded
- PortSwigger
Jul 05, 2026
Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped
- PortSwigger
Jul 04, 2026
Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vulnerability 1
- PortSwigger
Jul 04, 2026
Exploiting AI agents to exfiltrate sensitive information
- PortSwigger
Jul 04, 2026
Exploiting AI agents to perform destructive actions
- PortSwigger
Jul 04, 2026
Exploiting LLM APIs with excessive agency
- PortSwigger
Jul 04, 2026
Limit overrun race conditions
- PortSwigger
Jul 04, 2026
Exploiting server-side parameter pollution in a REST URL
- PortSwigger
Jul 04, 2026
Exploiting a mass assignment vulnerability
- PortSwigger
Jul 04, 2026
Finding and exploiting an unused API endpoint
- PortSwigger
Jul 04, 2026
Exploiting server-side parameter pollution in a query string
- PortSwigger
Jul 03, 2026
Exploiting an API endpoint using documentation
- PortSwigger
Jul 02, 2026
Bypassing GraphQL brute force protections
- PortSwigger
Jul 02, 2026
Finding a hidden GraphQL endpoint
- PortSwigger
Jul 02, 2026
Accidental exposure of private GraphQL fields
- PortSwigger
Jul 02, 2026
Accessing private GraphQL posts
- PortSwigger
Jun 22, 2026
Insecure direct object references
- PortSwigger
Jun 22, 2026
Method-based access control can be circumvented
- PortSwigger
Jun 22, 2026
Multi-step process with no access control on one step
- PortSwigger
Jun 22, 2026
Referer-based access control
- PortSwigger
Jun 22, 2026
URL-based access control can be circumvented
- PortSwigger
Jun 22, 2026
Unprotected admin functionality with unpredictable URL
- PortSwigger
Jun 22, 2026
Unprotected admin functionality
- PortSwigger
Jun 22, 2026
User ID controlled by request parameter with data leakage in redirect
- PortSwigger
Jun 22, 2026
User ID controlled by request parameter with password disclosure
- PortSwigger
Jun 22, 2026
User ID controlled by request parameter, with unpredictable user IDs
- PortSwigger
Jun 22, 2026
User ID controlled by request parameter
- PortSwigger
Jun 22, 2026
User role can be modified in user profile
- PortSwigger
Jun 22, 2026
User role controlled by request parameter
- PortSwigger
Jun 21, 2026
Discovering vulnerabilities quickly with targeted scanning
- PortSwigger
Jun 20, 2026
Exploiting HTTP request smuggling to reveal front-end request rewriting
- PortSwigger
Jun 20, 2026
Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vulnerability
- PortSwigger
Jun 20, 2026
HTTP request smuggling, obfuscating the TE header
- PortSwigger
Jun 07, 2026
Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability
- PortSwigger
Jun 07, 2026
HTTP request smuggling, basic CL.TE vulnerability
- PortSwigger
Jun 07, 2026
HTTP request smuggling, basic TE.CL vulnerability
- PortSwigger
Jun 07, 2026
HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
- PortSwigger
Jun 07, 2026
HTTP request smuggling, confirming a TE.CL vulnerability via differential responses
- PortSwigger

Created with Quartz v4.5.2 © 2026

GitHub
Discord Community