LAB #04 Basic password reset poisoning
Understanding and exploiting Host header injection in password reset functionality.
Jul 15, 20262 min read11
Command Palette
Search for a command to run...
Series
Portswigger Labs Journal
Solve PortSwigger Web Security Academy labs with simple, practical walkthroughs covering web vulnerabilities, Burp Suite techniques, exploitation methods, and real world penetration testing skills.
LAB#03 OAuth account hijacking via redirect_uri
Understanding and exploiting an insecure redirect_uri validation in OAuth.
Jul 14, 20262 min read11
LAB #02 Forced OAuth profile linking
Understanding and exploiting an insecure OAuth account-linking implementation.
Jul 8, 20263 min read4
LAB #01 SSRF via OpenID dynamic client registration
Understanding OpenID Dynamic Client Registration Abuse
Jul 6, 20264 min read31