# Web Hacking - PortSwigger&#x20;

{% embed url="<https://portswigger.net/web-security/all-labs>" %}

<table data-full-width="false"><thead><tr><th data-type="content-ref"></th></tr></thead><tbody><tr><td><a href="sql-injection-sqli">sql-injection-sqli</a></td></tr><tr><td><a href="cross-site-scripting-xss">cross-site-scripting-xss</a></td></tr><tr><td><a href="cross-site-request-forgery-csrf">cross-site-request-forgery-csrf</a></td></tr><tr><td><a href="clickjacking">clickjacking</a></td></tr><tr><td><a href="dom-based-vulnerabilities">dom-based-vulnerabilities</a></td></tr><tr><td><a href="cross-origin-resource-sharing-cors">cross-origin-resource-sharing-cors</a></td></tr><tr><td><a href="xml-external-entity-xxe-injection">xml-external-entity-xxe-injection</a></td></tr><tr><td><a href="server-side-request-forgery-ssrf">server-side-request-forgery-ssrf</a></td></tr><tr><td><a href="http-request-smuggling">http-request-smuggling</a></td></tr><tr><td><a href="os-command-injection">os-command-injection</a></td></tr><tr><td><a href="server-side-template-injection-ssti">server-side-template-injection-ssti</a></td></tr><tr><td><a href="path-traversal">path-traversal</a></td></tr><tr><td><a href="access-control-vulnerabilities">access-control-vulnerabilities</a></td></tr><tr><td><a href="authentication">authentication</a></td></tr><tr><td><a href="websockets">websockets</a></td></tr><tr><td><a href="web-cache-poisoning">web-cache-poisoning</a></td></tr><tr><td><a href="insecure-deserialization">insecure-deserialization</a></td></tr><tr><td><a href="information-disclosure">information-disclosure</a></td></tr><tr><td><a href="business-logic-vulnerabilities">business-logic-vulnerabilities</a></td></tr><tr><td><a href="http-host-header-attacks">http-host-header-attacks</a></td></tr><tr><td><a href="oauth-authentication">oauth-authentication</a></td></tr><tr><td><a href="file-upload-vulnerabilities">file-upload-vulnerabilities</a></td></tr><tr><td><a href="jwt-json-web-tokens">jwt-json-web-tokens</a></td></tr><tr><td><a href="essential-skills">essential-skills</a></td></tr><tr><td><a href="prototype-pollution">prototype-pollution</a></td></tr><tr><td><a href="graphql-api-vulnerabilities">graphql-api-vulnerabilities</a></td></tr><tr><td><a href="race-conditions">race-conditions</a></td></tr><tr><td><a href="nosql-injection">nosql-injection</a></td></tr><tr><td><a href="api-testing">api-testing</a></td></tr><tr><td><a href="web-llm-attacks">web-llm-attacks</a></td></tr><tr><td><a href="web-cache-deception">web-cache-deception</a></td></tr></tbody></table>

<figure><img src="https://3892280740-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FOeqybfPyWliD6m1hbKa3%2Fuploads%2FuWU5BFqjFUbkQ3qquYjU%2Fimage.png?alt=media&#x26;token=7002cc89-41ed-44c4-ba97-a4372ce77f9a" alt=""><figcaption></figcaption></figure>
