Spoorthi·1h agoPortSwigger lab: Broken brute-force protection, IP blockAuthentication mechanisms are designed to protect user accounts from unauthorized access. One of the most common protections implemented by…
Kaustubh Asthana·1d agoWeb Shell Upload via Obfuscated File ExtensionWhen a filter trusts whatever sits at the end of a string, and a single null byte quietly moves where that ending actually falls
PRiTi.EX·1d agoLab7: Password reset poisoning via dangling markupCapture Carlos’s newly generated password from the password-reset email and use it to log in to his account.
PRiTi.EX·1d agoLab6: Host validation bypass via connection state attackThe objective is to exploit incorrect Host header validation by reusing a previously validated HTTP connection to access the internal admin…
Kaustubh Asthana·3d agoWeb Shell Upload via Extension Blacklist BypassNot disguising a shell as PHP, but convincing Apache to treat a brand-new extension as PHP in the first place
PRiTi.EX·3d agoLab5: SSRF via flawed request parsingIn this Lab it accepts the absolute URL instead of the Host header. To solve the lab follow me.
Shadow·3d agoAPI Security Testing: A Complete Guide to Reconnaissance, Hidden Endpoints, Mass Assignment, and…APIs are one of the most important components of modern web applications. They connect front-end interfaces with back-end services, handle…
Shadow·6d agoAccess Control Vulnerabilities: A Practical Guide to Broken AuthorizationUnderstanding vertical and horizontal privilege escalation, IDOR, and common access control weaknesses through PortSwigger Web Security…
Kaustubh Asthana·6d agoWeb Shell Upload via Path TraversalLab 3 in the File Upload Vulnerabilities series: what happens when a server blocks script execution in the upload folder but not in the…
