PortSwigger Academy

Blind XXE with out of band interaction via XML Parameter Entities This lab has a "Check stock" feature that parses ...

Basic SSRF Against Another IP Basic SSRF Against another IP #GOAL: This lab has a stock check feature which fetches ...

Information disclosure in error messages Goal: This lab's verbose error messages reveal that it is using a vulnerable version of ...

2FA Broken Logic Goal: The lab's two factor authentication is vulnerable due to its flawed logic. To solve the lab, ...

SQL Injection obtaining data from other tables The goal of this lab is to retrieve data from other tables using ...