Web Hacking - PortSwigger

All labs | Web Security AcademyWebSecAcademy

SQL Injection (SQLI)
Cross-site Scripting (XSS)
Cross-site Request Forgery (CSRF)
Clickjacking
DOM-based vulnerabilities
Cross-origin resource sharing (CORS)
XML external entity (XXE) injection
Server-side request forgery (SSRF)
HTTP request smuggling
OS command injection
Server-side template injection (SSTI)
Path Traversal
Access control vulnerabilities
Authentication
WebSockets
Web Cache Poisoning
Insecure deserialization
Information disclosure
Business logic vulnerabilities
HTTP Host header attacks
OAuth authentication
File upload vulnerabilities
JWT (Json Web Tokens)
Essential skills
Prototype Pollution
GraphQL API vulnerabilities
Race conditions
NoSQL injection
API testing
Web LLM attacks
Web cache deception