PortSwigger Academy Journey

This repository documents my self-study journey through the PortSwigger Academy labs. It serves as a personal learning guide, covering various web security vulnerabilities and my solutions.

PortSwigger Lab

Covered Vulnerabilities

This repository explores the following vulnerability categories:

  • SQL Injection: Techniques for exploiting SQL injection vulnerabilities, including basic attacks, blind SQLi, and database examination.
  • Cross-Site Scripting (XSS): A deep dive into reflected and stored XSS attacks, with various contexts and bypasses.
  • File Upload Vulnerabilities: Methods for bypassing file upload restrictions to achieve Remote Code Execution (RCE).
  • OAuth 2.0 Vulnerabilities: Exploiting flawed OAuth 2.0 implementations, including hijacking, implicit flow, and redirect stealing.