LearnHacking.io (Page 4)

PortSwigger's "Basic SSRF against another back-end system" Walkthrough

Dec 21, 2021 4 min read appsec

This is a writeup for the “basic SSRF against another back-end system” lab from PortSwigger Academy. For this walkthrough, you’ll need to have Burp Suite set up, as well as a Portswigger

PortSwigger's "Basic SSRF against the local server" Walkthrough

Dec 21, 2021 3 min read appsec

This is a writeup for the “basic SSRF against localhost” lab from PortSwigger Academy. For this walkthrough, you’ll need to have Burp Suite set up, as well as a Portswigger Academy account.

PortSwigger's "Exploiting XXE to perform SSRF attacks" Walkthrough

Dec 20, 2021 4 min read appsec

This is the second of the XXE Labs from PortSwigger. For this walkthrough, you’ll need to have Burp Suite set up, as well as a Portswigger Academy account. Log in to your

PortSwigger's "Exploiting XXE using external entities to retrieve files" Walkthrough

Dec 20, 2021 3 min read appsec

This is the first of the XXE Labs from PortSwigger. For this walkthrough, you’ll need to have Burp Suite set up, as well as a Portswigger Academy account. Log in to your

PortSwigger's "Manipulating WebSocket messages to exploit vulnerabilities" Walkthrough

Dec 19, 2021 4 min read appsec

This post is a walkthrough of PortSwigger’s “modifying serialized objects” lab. You will need to have Burp Suite set up, as well as a Portswigger Academy account. Log in to your Academy