Skip to content

SantoshKumarP1412/PortSwigger

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

95 Commits
Blind OS command injection with out-of-band data exfiltration
Blind OS command injection with out-of-band data exfiltration
 
 
Blind OS command injection with out-of-band interaction
Blind OS command injection with out-of-band interaction
 
 
Blind OS command injection with output redirection
Blind OS command injection with output redirection
 
 
Blind OS command injection with time delays
Blind OS command injection with time delays
 
 
Blind SQL injection with conditional errors
Blind SQL injection with conditional errors
 
 
Blind SQL injection with conditional responses
Blind SQL injection with conditional responses
 
 
Blind SQL injection with time delays and information retrieval
Blind SQL injection with time delays and information retrieval
 
 
Blind SQL injection with time delays
Blind SQL injection with time delays
 
 
CSRF
CSRF
 
 
Completed Lab Screenshots
Completed Lab Screenshots
 
 
File path traversal, simple case
File path traversal, simple case
 
 
File path traversal, traversal sequences blocked with absolute path bypass
File path traversal, traversal sequences blocked with absolute path bypass
 
 
File path traversal, traversal sequences stripped non-recursively PRACTITIONER LAB
File path traversal, traversal sequences stripped non-recursively PRACTITIONER LAB
 
 
File path traversal, traversal sequences stripped with superfluous URL-decode
File path traversal, traversal sequences stripped with superfluous URL-decode
 
 
File path traversal, validation of file extension with null byte bypass
File path traversal, validation of file extension with null byte bypass
 
 
File path traversal, validation of start of path
File path traversal, validation of start of path
 
 
Insecure direct object references
Insecure direct object references
 
 
Lab: Blind SQL injection with out-of-band interaction
Lab: Blind SQL injection with out-of-band interaction
 
 
Method-based access control can be circumvented
Method-based access control can be circumvented
 
 
Multi-step process with no access control on one step
Multi-step process with no access control on one step
 
 
OS command injection, simple case
OS command injection, simple case
 
 
Referer-based access control
Referer-based access control
 
 
Remote code execution via web shell upload
Remote code execution via web shell upload
 
 
SQL injection UNION attack, determining the number of columns returned by the query
SQL injection UNION attack, determining the number of columns returned by the query
 
 
SQL injection UNION attack, finding a column containing text
SQL injection UNION attack, finding a column containing text
 
 
SQL injection UNION attack, retrieving data from other tables
SQL injection UNION attack, retrieving data from other tables
 
 
SQL injection UNION attack, retrieving multiple values in a single column
SQL injection UNION attack, retrieving multiple values in a single column
 
 
SQL injection attack, listing the database contents on Oracle
SQL injection attack, listing the database contents on Oracle
 
 
SQL injection attack, listing the database contents on non-Oracle databases
SQL injection attack, listing the database contents on non-Oracle databases
 
 
SQL injection attack, querying the database type and version on MySQL and Microsoft
SQL injection attack, querying the database type and version on MySQL and Microsoft
 
 
SQL injection attack, querying the database type and version on Oracle
SQL injection attack, querying the database type and version on Oracle
 
 
SQL injection vulnerability allowing login bypass
SQL injection vulnerability allowing login bypass
 
 
SQL injection with filter bypass via XML encoding
SQL injection with filter bypass via XML encoding
 
 
SQL_Injection/SQL injection vulnerability in WHERE clause allowing retrieve
SQL_Injection/SQL injection vulnerability in WHERE clause allowing retrieve
 
 
URL-based access control can be circumvented
URL-based access control can be circumvented
 
 
Unprotected admin functionality with unpredictable URL
Unprotected admin functionality with unpredictable URL
 
 
Unprotected admin functionality
Unprotected admin functionality
 
 
User ID controlled by request parameter with data leakage in redirect
User ID controlled by request parameter with data leakage in redirect
 
 
User ID controlled by request parameter with password disclosure
User ID controlled by request parameter with password disclosure
 
 
User ID controlled by request parameter, with unpredictable user IDs
User ID controlled by request parameter, with unpredictable user IDs
 
 
User ID controlled by request parameter
User ID controlled by request parameter
 
 
User role can be modified in user profile
User role can be modified in user profile
 
 
User role controlled by request parameter
User role controlled by request parameter
 
 
Visible error-based SQL injection
Visible error-based SQL injection
 
 
XSS
XSS
 
 
XXE
XXE
 
 
README.md
README.md
 
 

Repository files navigation

PortSwigger

Lab

About

Lab

Resources

Readme
Activity

Stars

0 stars

Watchers

1 watching

Forks

0 forks
Report repository

Releases

No releases published

Packages

No packages published