Categoría: Portswigger Lab

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Web shell upload via extension blacklist bypass

Web shell upload via path traversal

Web shell upload via Content-Type restriction bypass

Remote code execution via web shell upload

Exploiting LLM APIs with excessive agency writeup

Exploiting a mass assignment vulnerability writeup

Finding and exploiting an unused API endpoint

Exploiting server-side parameter pollution in a query string Portswigger Lab Solution