Walkthrough 56
- PortSwigger Academy Labs Walkthrough
- PortSwigger Walkthrough - Indirect prompt injection
- PortSwigger Walkthrough - Exploiting vulnerabilities in LLM APIs
- PortSwigger Walkthrough - Bypassing AI scanner defenses to exfiltrate sensitive information
- PortSwigger Walkthrough - Exploiting LLM APIs with excessive agency
- PortSwigger Walkthrough - Exploiting AI agents to trigger secondary vulnerabilities
- PortSwigger Walkthrough - Exploiting AI agents to exfiltrate sensitive information
- PortSwigger Walkthrough - Exploiting AI agents to perform destructive actions
- PortSwigger Walkthrough - Manipulating WebSocket messages to exploit vulnerabilities
- PortSwigger Walkthrough - Manipulating the WebSocket handshake to exploit vulnerabilities
- PortSwigger Walkthrough - Cross-site WebSocket hijacking
- PortSwigger Walkthrough - SSRF with filter bypass via open redirection vulnerability
- PortSwigger Walkthrough - Blind SSRF with out-of-band detection
- PortSwigger Walkthrough - SSRF with blacklist-based input filter
- PortSwigger Walkthrough - Basic SSRF against the local server
- PortSwigger Walkthrough - Basic SSRF against another back-end system
- PortSwigger Walkthrough - CORS vulnerability with trusted null origin
- PortSwigger Walkthrough - CORS vulnerability with trusted insecure protocols
- PortSwigger Walkthrough - CORS vulnerability with basic origin reflection
- PortSwigger Walkthrough - File path traversal, validation of start of path
- PortSwigger Walkthrough - File path traversal, validation of file extension with null byte bypass
- PortSwigger Walkthrough - File path traversal, simple case
- PortSwigger Walkthrough - File path traversal, traversal sequences stripped with superfluous URL-decode
- PortSwigger Walkthrough - File path traversal, traversal sequences stripped non-recursively
- PortSwigger Walkthrough - File path traversal, traversal sequences blocked with absolute path bypass
- PortSwigger Walkthrough - Username enumeration via subtly different responses
- PortSwigger Walkthrough - Username enumeration via response timing
- PortSwigger Walkthrough - Username enumeration via different responses
- PortSwigger Walkthrough - Username enumeration via account lock
- PortSwigger Walkthrough - Password reset poisoning via middleware
- PortSwigger Walkthrough - Password reset broken logic
- PortSwigger Walkthrough - Password brute-force via password change
- PortSwigger Walkthrough - Offline password cracking
- PortSwigger Walkthrough - Brute-forcing a stay-logged-in cookie
- PortSwigger Walkthrough - Broken brute-force protection, IP block
- PortSwigger Walkthrough - 2FA Simple Bypass
- PortSwigger Walkthrough - 2FA Broken Logic
- DVWA Complete Walkthrough
- DVWA Walkthrough I - Brute Force
- DVWA Walkthrough II - Command Injection
- DVWA Walkthrough III - Cross Site Request Forgery (CSRF)
- DVWA Walkthrough IV - File Inclusion
- DVWA Walkthrough V - File Upload
- DVWA Walkthrough VI - Insecure CAPTCHA
- DVWA Walkthrough VII - SQL Injection
- DVWA Walkthrough VIII - SQL Injection (Blind)
- DVWA Walkthrough IX - Weak Session IDs
- DVWA Walkthrough X - DOM Based Cross Site Scripting (XSS)
- DVWA Walkthrough XI - Reflected Cross Site Scripting (XSS)
- DVWA Walkthrough XII - Stored Cross Site Scripting (XSS)
- DVWA Walkthrough XIII - Content-Security Policy Bypass
- DVWA Walkthrough XIV - JavaScript Attacks
- DVWA Walkthrough XV - Authorisation Bypass
- DVWA Walkthrough XVI - Open HTTP Redirect
- DVWA Walkthrough XVII - Cryptography
- DVWA Walkthrough XVIII - API Security