Web Security Academy

Portswigger Lab

Explore recommended reads, summarized by AI

Lab Walkthroughs and Tutorials

Guides and tutorials covering specific web security vulnerabilities and lab exercises.

Web Security Lab Solutions

Popular this week

Blueorionn

PortSwigger Web Security Academy: All NoSQL Injection Labs Solved (Full Walkthrough)

MazenWaleed

Exploiting AI Agents to Perform Destructive Actions — PortSwigger Lab Writeup

MazenWaleed

Exploiting AI Agents to Exfiltrate Sensitive Information — PortSwigger Lab Writeup

Mayank Ningania

Lab: Username enumeration via response timing | Authentication | Portswigger (writeup)

Destin Olivia Rengganis

Basic Clickjacking with CSRF Token Protection — PortSwigger Lab

Latest stories

Spoorthi

PortSwigger Lab: Username enumeration via different responses

PRiTi.EX

Lab6: Host validation bypass via connection state attack

PRiTi.EX

Lab2: Host header authentication bypass — HTTP Host header attacks

PRiTi.EX

Lab1: Basic password reset poisoning — HTTP Host header attacks

Youssef AlaaEldin

Lab: Remote code execution via polyglot web shell upload

See more stories

Who to follow

Popular this week

Blueorionn

PortSwigger Web Security Academy: All NoSQL Injection Labs Solved (Full Walkthrough)

MazenWaleed

Exploiting AI Agents to Perform Destructive Actions — PortSwigger Lab Writeup

MazenWaleed

Exploiting AI Agents to Exfiltrate Sensitive Information — PortSwigger Lab Writeup

Mayank Ningania

Lab: Username enumeration via response timing | Authentication | Portswigger (writeup)

Destin Olivia Rengganis

Basic Clickjacking with CSRF Token Protection — PortSwigger Lab

Latest stories

Spoorthi

PortSwigger Lab: Username enumeration via different responses

PRiTi.EX

Lab6: Host validation bypass via connection state attack

PRiTi.EX

Lab2: Host header authentication bypass — HTTP Host header attacks

PRiTi.EX

Lab1: Basic password reset poisoning — HTTP Host header attacks

Youssef AlaaEldin

Lab: Remote code execution via polyglot web shell upload

See more stories

Who to follow