Spoorthi·6d agoPortSwigger Lab: Username enumeration via different responsesAuthentication mechanisms are a critical component of web application security. During this assessment, the login functionality was…
PRiTi.EX·Nov 3Lab6: Host validation bypass via connection state attackThe objective is to exploit incorrect Host header validation by reusing a previously validated HTTP connection to access the internal admin…
PRiTi.EX·Oct 30Lab2: Host header authentication bypass — HTTP Host header attacksThis lab makes an assumption about the privilege level of the user based on the HTTP Host header. I solved it using a simple trick follow…
PRiTi.EX·Oct 27Lab1: Basic password reset poisoning — HTTP Host header attacksTo solve this takes more time because i unable to understand the basic of functionality so i write it from basic so every one can…
Het Prajapati·Oct 22PortSwigger Walkthrough: How a SQL Comment Can Bypass a LoginSometimes, understanding one small concept can help you solve an entire lab.
sa0k0·Oct 20Just Ask: Exploiting Excessive Agency in an LLMFrom customer support chat to database deletion: following the tools in a PortSwigger Web LLM lab.
Het Prajapati·Oct 20Understanding Basic SQL Injection with PortSwigger Web Security Academy: A Beginner’s WalkthroughLearning SQL injection, intercepting HTTP requests with Burp Suite, and understanding how a simple input can change a database query.
PRiTi.EX·Oct 15Lab: Performing CSRF exploits over GraphQL #lab5This labs takes my time because i stuck in that URL encode part so lets starts how i solved this lab.
PRiTi.EX·Oct 13Lab: Bypassing GraphQL brute force protections #lab4The lab’s rate limit can be bypassed by batching multiple login operations into one GraphQL request using aliases, rather than sending each…
