Name		Name	Last commit message	Last commit date
Latest commit History 95 Commits
Blind OS command injection with out-of-band data exfiltration		Blind OS command injection with out-of-band data exfiltration
Blind OS command injection with out-of-band interaction		Blind OS command injection with out-of-band interaction
Blind OS command injection with output redirection		Blind OS command injection with output redirection
Blind OS command injection with time delays		Blind OS command injection with time delays
Blind SQL injection with conditional errors		Blind SQL injection with conditional errors
Blind SQL injection with conditional responses		Blind SQL injection with conditional responses
Blind SQL injection with time delays and information retrieval		Blind SQL injection with time delays and information retrieval
Blind SQL injection with time delays		Blind SQL injection with time delays
CSRF		CSRF
Completed Lab Screenshots		Completed Lab Screenshots
File path traversal, simple case		File path traversal, simple case
File path traversal, traversal sequences blocked with absolute path bypass		File path traversal, traversal sequences blocked with absolute path bypass
File path traversal, traversal sequences stripped non-recursively PRACTITIONER LAB		File path traversal, traversal sequences stripped non-recursively PRACTITIONER LAB
File path traversal, traversal sequences stripped with superfluous URL-decode		File path traversal, traversal sequences stripped with superfluous URL-decode
File path traversal, validation of file extension with null byte bypass		File path traversal, validation of file extension with null byte bypass
File path traversal, validation of start of path		File path traversal, validation of start of path
Insecure direct object references		Insecure direct object references
Lab: Blind SQL injection with out-of-band interaction		Lab: Blind SQL injection with out-of-band interaction
Method-based access control can be circumvented		Method-based access control can be circumvented
Multi-step process with no access control on one step		Multi-step process with no access control on one step
OS command injection, simple case		OS command injection, simple case
Referer-based access control		Referer-based access control
Remote code execution via web shell upload		Remote code execution via web shell upload
SQL injection UNION attack, determining the number of columns returned by the query		SQL injection UNION attack, determining the number of columns returned by the query
SQL injection UNION attack, finding a column containing text		SQL injection UNION attack, finding a column containing text
SQL injection UNION attack, retrieving data from other tables		SQL injection UNION attack, retrieving data from other tables
SQL injection UNION attack, retrieving multiple values in a single column		SQL injection UNION attack, retrieving multiple values in a single column
SQL injection attack, listing the database contents on Oracle		SQL injection attack, listing the database contents on Oracle
SQL injection attack, listing the database contents on non-Oracle databases		SQL injection attack, listing the database contents on non-Oracle databases
SQL injection attack, querying the database type and version on MySQL and Microsoft		SQL injection attack, querying the database type and version on MySQL and Microsoft
SQL injection attack, querying the database type and version on Oracle		SQL injection attack, querying the database type and version on Oracle
SQL injection vulnerability allowing login bypass		SQL injection vulnerability allowing login bypass
SQL injection with filter bypass via XML encoding		SQL injection with filter bypass via XML encoding
SQL_Injection/SQL injection vulnerability in WHERE clause allowing retrieve		SQL_Injection/SQL injection vulnerability in WHERE clause allowing retrieve
URL-based access control can be circumvented		URL-based access control can be circumvented
Unprotected admin functionality with unpredictable URL		Unprotected admin functionality with unpredictable URL
Unprotected admin functionality		Unprotected admin functionality
User ID controlled by request parameter with data leakage in redirect		User ID controlled by request parameter with data leakage in redirect
User ID controlled by request parameter with password disclosure		User ID controlled by request parameter with password disclosure
User ID controlled by request parameter, with unpredictable user IDs		User ID controlled by request parameter, with unpredictable user IDs
User ID controlled by request parameter		User ID controlled by request parameter
User role can be modified in user profile		User role can be modified in user profile
User role controlled by request parameter		User role controlled by request parameter
Visible error-based SQL injection		Visible error-based SQL injection
XSS		XSS
XXE		XXE
README.md		README.md

SantoshKumarP1412/PortSwigger

Folders and files

Latest commit

History

Repository files navigation

PortSwigger

About

Resources

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Packages