Portswigger Lab

Penetration Testing

Portswigger

Explore recommended reads, summarized by AI

Web Security Testing

Practical guides and walkthroughs for identifying and exploiting vulnerabilities in web applications.

XSS and Injection Vulnerabilities

Popular this week

Shadow

API Security Testing: A Complete Guide to Reconnaissance, Hidden Endpoints, Mass Assignment, and…

Shadow

Access Control Vulnerabilities: A Practical Guide to Broken Authorization

Kaustubh Asthana

Blind OS Command Injection With Out-of-Band Data Exfiltration

MazenWaleed

Exploiting AI Agents to Trigger Secondary Vulnerabilities — PortSwigger Lab Writeup

MazenWaleed

Bypassing AI Scanner Defenses to Exfiltrate Sensitive Information — PortSwigger Lab Writeup

Latest stories

Kaustubh Asthana

Web Shell Upload via Obfuscated File Extension

PRiTi.EX

Lab7: Password reset poisoning via dangling markup

TEJAS

I Got Scared Looking at an AI Security Scanner… Then I Broke It

PRiTi.EX

Lab6: Host validation bypass via connection state attack

Kaustubh Asthana

Web Shell Upload via Extension Blacklist Bypass

See more stories

Who to follow

Popular this week

Shadow

API Security Testing: A Complete Guide to Reconnaissance, Hidden Endpoints, Mass Assignment, and…

Shadow

Access Control Vulnerabilities: A Practical Guide to Broken Authorization

Kaustubh Asthana

Blind OS Command Injection With Out-of-Band Data Exfiltration

MazenWaleed

Exploiting AI Agents to Trigger Secondary Vulnerabilities — PortSwigger Lab Writeup

MazenWaleed

Bypassing AI Scanner Defenses to Exfiltrate Sensitive Information — PortSwigger Lab Writeup

Latest stories

Kaustubh Asthana

Web Shell Upload via Obfuscated File Extension

PRiTi.EX

Lab7: Password reset poisoning via dangling markup

TEJAS

I Got Scared Looking at an AI Security Scanner… Then I Broke It

PRiTi.EX

Lab6: Host validation bypass via connection state attack

Kaustubh Asthana

Web Shell Upload via Extension Blacklist Bypass

See more stories

Who to follow