⤷ Title: Lab: Insecure direct object references
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Thu, 20 Feb 2025 00:36:32 GMT
════════════════════════
⌗ Tags: #portswigger_lab #infosec #portswigger #web_security_academy #cybersecurity
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Thu, 20 Feb 2025 00:36:32 GMT
════════════════════════
⌗ Tags: #portswigger_lab #infosec #portswigger #web_security_academy #cybersecurity
Medium
Lab: Insecure direct object references
Access control vulnerabilities — PortSwigger Academy
⤷ Title: Lab: URL-based access control can be circumvented
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Thu, 20 Feb 2025 06:32:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #portswigger_lab #portswigger #web_security_academy
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Thu, 20 Feb 2025 06:32:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #portswigger_lab #portswigger #web_security_academy
Medium
Lab: URL-based access control can be circumvented
Access control vulnerabilities — PortSwigger Academy
⤷ Title: Lab: Multi-step process with no access control on one step
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Fri, 21 Feb 2025 14:16:17 GMT
════════════════════════
⌗ Tags: #infosec #portswigger #web_security_academy #cybersecurity #portswigger_lab
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Fri, 21 Feb 2025 14:16:17 GMT
════════════════════════
⌗ Tags: #infosec #portswigger #web_security_academy #cybersecurity #portswigger_lab
Medium
Lab: Multi-step process with no access control on one step
Access control vulnerabilities — PortSwigger Academy
⤷ Title: Lab: Referer-based access control
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Fri, 21 Feb 2025 14:16:13 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #web_security_academy #portswigger_lab #portswigger
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Fri, 21 Feb 2025 14:16:13 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #web_security_academy #portswigger_lab #portswigger
Medium
Lab: Referer-based access control
Access control vulnerabilities — PortSwigger Academy
⤷ Title: OverTheWire Bandit Levels 16–24 Write-Up
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Fri, 21 Feb 2025 13:47:18 GMT
════════════════════════
⌗ Tags: #web_security_academy #infosec #portswigger_lab #cybersecurity #portswigger
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Fri, 21 Feb 2025 13:47:18 GMT
════════════════════════
⌗ Tags: #web_security_academy #infosec #portswigger_lab #cybersecurity #portswigger
Medium
OverTheWire Bandit Levels 16–24 Write-Up
https://overthewire.org/wargames/bandit/
⤷ Title: OverTheWire Bandit Levels 25–32 Write-Up
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Sun, 23 Feb 2025 17:30:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #portswigger_lab #web_security_academy #infosec #portswigger
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Sun, 23 Feb 2025 17:30:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #portswigger_lab #web_security_academy #infosec #portswigger
Medium
OverTheWire Bandit Levels 25–32 Write-Up
https://overthewire.org/wargames/bandit/
⤷ Title: Portswigger Web Security Academy | Logic Flaws Lab #1
════════════════════════
𐀪 Author: BooRuleDie
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 05:08:10 GMT
════════════════════════
⌗ Tags: #portswigger #web_security_academy #logic_flaw #hacking #web_security
════════════════════════
𐀪 Author: BooRuleDie
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 05:08:10 GMT
════════════════════════
⌗ Tags: #portswigger #web_security_academy #logic_flaw #hacking #web_security
Medium
Portswigger Web Security Academy | Logic Flaws Lab #1
Hi all! Today we’ll be solving the first Logic Flaw lab of the Portswigger Web Security Academy. Let’s see the lab description and start…
⤷ Title: Access control vulnerabilities
════════════════════════
𐀪 Author: MUHTADIN
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 15:19:08 GMT
════════════════════════
⌗ Tags: #web_security_academy #red_team #bug_bounty #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: MUHTADIN
════════════════════════
ⴵ Time: Mon, 14 Jul 2025 15:19:08 GMT
════════════════════════
⌗ Tags: #web_security_academy #red_team #bug_bounty #penetration_testing #cybersecurity
Medium
Access control vulnerabilities
Access control vulnerabilities adalah celah keamanan yang terjadi ketika aplikasi gagal membatasi hak akses pengguna sesuai peran atau…
⤷ Title: Business logic vulnerabilities
════════════════════════
𐀪 Author: MUHTADIN
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 12:28:35 GMT
════════════════════════
⌗ Tags: #burpsuite #web_security_academy #cybersecurity #bug_bounty #pentester
════════════════════════
𐀪 Author: MUHTADIN
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 12:28:35 GMT
════════════════════════
⌗ Tags: #burpsuite #web_security_academy #cybersecurity #bug_bounty #pentester
Medium
Business logic vulnerabilities
Business Logic Vulnerabilities adalah celah keamanan yang muncul ketika pengguna dapat menyalahgunakan alur logika bisnis aplikasi untuk…
⤷ Title: Portswigger Web Security Academy labs: SQLi Lab 1 — Retrieving Hidden data
════════════════════════
𐀪 Author: adhithya sivanesh
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 08:43:43 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security_academy #portswigger #portswigger_lab #sqli
════════════════════════
𐀪 Author: adhithya sivanesh
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 08:43:43 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security_academy #portswigger #portswigger_lab #sqli
Medium
Portswigger Web Security Academy labs: SQLi Lab 1 — Retrieving Hidden data
Use SQL Injection to retrieve data that was not intended to be returned
⤷ Title: Access Control — Unprotected Functionality
════════════════════════
𐀪 Author: Varkeythms
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 17:48:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #pentesting_lab #web_security_academy
════════════════════════
𐀪 Author: Varkeythms
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 17:48:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #pentesting_lab #web_security_academy
Medium
Access Control — Unprotected Functionality
⤷ Title: Web Security Academy — SQL Injection — Lab 1
════════════════════════
𐀪 Author: Steven Estill Jr
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 06:12:28 GMT
════════════════════════
⌗ Tags: #burpsuite #web_penetration_testing #portswigger_lab #web_security_academy #sql_injection
════════════════════════
𐀪 Author: Steven Estill Jr
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 06:12:28 GMT
════════════════════════
⌗ Tags: #burpsuite #web_penetration_testing #portswigger_lab #web_security_academy #sql_injection
Medium
Web Security Academy — SQL Injection — Lab 1
So, we’re being told that we’ll perform an SQL Injection attack, to retrieve data we normally couldn’t get. In this lab, we will see that…
⤷ Title: Lab: Exploiting AI agents to perform destructive actions
════════════════════════
𐀪 Author: Emman Cajucom
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:51:09 GMT
════════════════════════
⌗ Tags: #portswigger_lab #ethical_hacking #web_security_academy
════════════════════════
𐀪 Author: Emman Cajucom
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:51:09 GMT
════════════════════════
⌗ Tags: #portswigger_lab #ethical_hacking #web_security_academy
Medium
Lab: Exploiting AI agents to perform destructive actions
By: Emmanuel Cajucom
⤷ Title: Lab: Exploiting AI agents to exfiltrate sensitive information
════════════════════════
𐀪 Author: Emman Cajucom
════════════════════════
ⴵ Time: Sun, 10 May 2026 11:46:25 GMT
════════════════════════
⌗ Tags: #web_security_academy #ethical_hacking
════════════════════════
𐀪 Author: Emman Cajucom
════════════════════════
ⴵ Time: Sun, 10 May 2026 11:46:25 GMT
════════════════════════
⌗ Tags: #web_security_academy #ethical_hacking
Medium
Lab: Exploiting AI agents to exfiltrate sensitive information
By: Emmanuel Cajucom
⤷ Title: PortSwigger Lab: SQL Injection #3 — SQL injection attack, listing the database contents on…
════════════════════════
𐀪 Author: Azhar Aufa
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:20:57 GMT
════════════════════════
⌗ Tags: #web_security_academy #sql_injection #portswigger_lab
════════════════════════
𐀪 Author: Azhar Aufa
════════════════════════
ⴵ Time: Fri, 22 May 2026 23:20:57 GMT
════════════════════════
⌗ Tags: #web_security_academy #sql_injection #portswigger_lab
Medium
PortSwigger Lab: SQL Injection #3 — SQL injection attack, listing the database contents on…
Di lab ini, tujuannya sederhana: menemukan password administrator untuk login di My Account dengan celah SQL Injection menggunakan teknik…
⤷ Title: Lab 3#: Finding and exploiting an unused API endpoint
════════════════════════
𐀪 Author: mohamed
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 11:02:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #api_security #vulnerability_assessment #web_security_academy #access_control
════════════════════════
𐀪 Author: mohamed
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 11:02:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #api_security #vulnerability_assessment #web_security_academy #access_control
Medium
Lab 3#: Finding and exploiting an unused API endpoint
Hello readers! I’m Mohammad Reza, and today we’ll be discussing how to solve the third lab in the PortSwigger API Testing Academy: “Finding…
⤷ Title: Bypassing Authentication Gates: SQL Injection (Auth Bypass) on Login Portal
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:52:43 GMT
════════════════════════
⌗ Tags: #admin_takeover #web_security_academy #sql_injection #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:52:43 GMT
════════════════════════
⌗ Tags: #admin_takeover #web_security_academy #sql_injection #bug_bounty #cybersecurity
Medium
Bypassing Authentication Gates: SQL Injection (Auth Bypass) on Login Portal
Executive Summary
⤷ Title: Blind SQL Injection with Conditional Responses - PortSwigger Lab Write-Up
════════════════════════
𐀪 Author: Om Barot
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 14:10:57 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_security_academy #sql_injection #burpsuite #cybersecurity
════════════════════════
𐀪 Author: Om Barot
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 14:10:57 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_security_academy #sql_injection #burpsuite #cybersecurity
Medium
Blind SQL Injection with Conditional Responses - PortSwigger Lab Write-Up
Introduction
⤷ Title: SQL Injection — PortSwigger Web Security Academy Labs (Write-up)
════════════════════════
𐀪 Author: 0x_root
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 15:22:52 GMT
════════════════════════
⌗ Tags: #web_security_academy #web_security #sql #sql_injection #cybersecurity
════════════════════════
𐀪 Author: 0x_root
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 15:22:52 GMT
════════════════════════
⌗ Tags: #web_security_academy #web_security #sql #sql_injection #cybersecurity
Medium
SQL Injection — PortSwigger Web Security Academy Labs (Write-up)
A walkthrough of SQL injection labs from PortSwigger Web Security Academy, covering WHERE-clause injection, login bypass, UNION-based…