This is my space for practicing portswigger labs and web vulnerabilities. The content in this repository is primarily focused on practical hands-on learning and aims to provide a comprehensive understanding of various web vulnerabilities and their exploitation techniques. https://portswigger.net/web-security/all-labs
The repository covers a wide range of web vulnerabilities, including but not limited to:
- Account Take Over
- Authentication
- Broken Access Control
- Clickjacking
- CORS
- CSRF
- File Upload
- HTTP request smuggling
- Information Disclosure
- Insecure deserialization
- JWT
- OS Command Injection
- OAuth2
- Path Traversal (Directory Traversal)
- Server-side template injection
- SQL Injection
- SSRF
- XXE
Contributions to this repository are welcome. If you would like to contribute additional exercises, demos, or improve existing content, please follow these steps
- Fork the repository.
- Create a new branch for your changes
- Make your modifications or additions
- Test your changes thoroughly
- Submit a pull request with a clear description of the changes made.
Please ensure that any new content or modifications align with the purpose and structure of the repository. All contributions will be reviewed, and your help is appreciated in making this resource better for the community.
The content in this repository is provided under the MIT License. Feel free to use, modify, and distribute the materials for educational and non-commercial purposes. However, please be aware of the responsibilities and adhere to ethical guidelines when practicing and applying the knowledge gained from this repository.
DISCLAIMER: The exercises and demos provided in this repository are intended for educational purposes only. The authors and contributors are not responsible for any unauthorized or malicious use of the information or tools provided. Always obtain proper authorization and exercise caution when conducting security testing or penetration testing activities.