Web Hacking - PortSwigger

All labs | Web Security AcademyWebSecAcademy

SQL Injection (SQLI)
Cross-site Scripting (XSS)
Cross-site Request Forgery (CSRF)
Clickjacking
DOM-based vulnerabilities
Cross-origin resource sharing (CORS)
XML external entity (XXE) injection
Server-side request forgery (SSRF)
HTTP request smuggling
OS command injection
Server-side template injection (SSTI)
Path Traversal
Access control vulnerabilities