Chetan Patil·Just nowReflected XSS with Event Handlers and href Attributes Blocked (PortSwigger Lab)Practitioner-level lab from the PortSwigger Web Security Academy — solved with the classic SVG <animate> trick: setting an anchor's href…
Faresmohamed·Oct 27Basic SQL Injection — Part 1Scope of this post: this is Part 1, covering error-based/in-band SQLi through two beginner labs. Part 2 will cover UNION-based and Blind…
Rachael Muga·Oct 20SQL Injection Attack: Listing the Database Contents on Non-Oracle Databases: Without Burp Suite…In my previous write-up I solved this lab the “normal” way, using Burp Suite Repeater. 👉 Read here
ThePentestGirl·Sep 24Authentication bypass via information disclosure — PortSwiggerThis lab’s administration interface has an authentication bypass vulnerability, but it is impractical to exploit without knowledge of a…
