-
Server-side request forgery (SSRF) (PortSwigger Writeup)
Contents Lab: Basic SSRF against the local server題目敘述題目…
-
Business logic vulnerabilities (PortSwigger Writeup)
Contents Lab: Excessive trust in client-side controls題目…
-
WebSockets (PortSwigger Writeup)
Contents Lab: Manipulating WebSocket messages to exploi…
-
Access control vulnerabilities (PortSwigger Writeup)
Contents Lab: Unprotected admin functionality題目敘述題目解釋解答…
-
Server-side template injection (PortSwigger Writeup)
Contents Lab: Basic server-side template injection題目敘述題…
-
Information disclosure (PortSwigger Writeup)
Contents Lab: Information disclosure in error messages題…
-
File upload vulnerabilities (PortSwigger Writeup)
Contents Lab: Remote code execution via web shell uploa…
-
OS command injection (PortSwigger Writeup)
Contents Lab: OS command injection, simple case題目敘述題目解釋…
-
Directory traversal (PortSwigger Writeup)
Contents Lab: File path traversal, simple case題目敘述題目解釋解…
-
SQL injection (PortSwigger Writeup)
Contents Lab: SQL injection UNION attack, determining t…