appsec - LearnHacking.io (Page 6)

PortSwigger's "User ID controlled by request parameter with data leakage in redirect" Walkthrough

Dec 16, 2021 3 min read access-control

This is a write-up of of PortSwigger Academy’s “user ID controlled by request parameter with data leakage in redirect” lab. You’ll need a Portswigger Academy account before you get started. Log

PortSwigger's "User ID controlled by request parameter, with unpredictable user IDs" Walkthrough

Dec 15, 2021 3 min read access-control

This is a write-up of of PortSwigger Academy’s “user ID controlled by request parameter, with unpredictable user IDs” lab. You’ll need a Portswigger Academy account before you get started. Log in

PortSwigger's "Authentication bypass via information disclosure" Walkthrough

Dec 15, 2021 4 min read appsec

This is the fourth of five “information disclosure” labs from Portswigger Academy. Before we get started, you’ll need a Portswigger Academy account. You’ll also need Burp Suite set up. Log in

PortSwigger's "User ID controlled by request parameter" Walkthrough

Dec 14, 2021 2 min read access-control

This post is a writeup of PortSwigger Academy’s “user ID controlled by request parameter” lab. You don’t necessarily need Burp Suite installed for this lab, but if you want to have

PortSwigger's "Source code disclosure via backup files" Walkthrough

Dec 14, 2021 2 min read appsec

This is another quick walkthrough, this time with the third of five information disclosure labs (four of which are Apprentice-level). Before we get started, you’ll need a Portswigger Academy account. Log in