PortSwiggerlabs: Modifying serialized data types
Information : This lab uses a serialization-based session mechanism and is vulnerable to authentication bypass as a result. To solve the lab, edit the serialized object in the session cookie to ac...
Elmehdi Laassiri
PortSwiggerlabs: Modifying serialized objects
Information : This lab uses a serialization-based session mechanism and is vulnerable to privilege escalation as a result. To solve the lab, edit the serialized object in the session cookie to exp...
PortSwiggerlabs: Reflected XSS into attribute with angle brackets HTML-encoded
Information : This lab contains a reflected cross-site scripting vulnerability in the search blog functionality where angle brackets are HTML-encoded. To solve this lab, perform a cross-site scrip...
PortSwiggerlabs: Stored XSS into anchor href attribute with double quotes HTML-encoded
Information : This lab contains a stored cross-site scripting vulnerability in the comment functionality. To solve this lab, submit a comment that calls the alert function when the comment author ...
HackSmarter Past Walkthrough
Objective/Scope : You have been hired by Hack Smarter to perform a Penetration Test on Past Systems Inc. During your call with the client, they stated they are currently adding new machines to the...
PortSwiggerlabs: DOM XSS in jQuery anchor href attribute sink using location.search source
Information : This lab contains a DOM-based cross-site scripting vulnerability in the submit feedback page. It uses the jQuery library’s $ selector function to find an anchor element, and changes ...
PortSwiggerlabs: DOM XSS in innerHTML sink using source location.search
Information : This lab contains a DOM-based cross-site scripting vulnerability in the search blog functionality. It uses an innerHTML assignment, which changes the HTML contents of a div element, ...
PortSwiggerlabs: DOM XSS in innerHTML sink using source location.search
Information : This lab contains a DOM-based cross-site scripting vulnerability in the search blog functionality. It uses an innerHTML assignment, which changes the HTML contents of a div element, ...
PortSwiggerlabs: DOM XSS in document.write sink using source location.search
Information : This lab contains a DOM-based cross-site scripting vulnerability in the search query tracking functionality. It uses the JavaScript document.write function, which writes data out to ...
PortSwiggerlabs: Stored XSS into HTML context with nothing encoded
Information : This lab contains a stored cross-site scripting vulnerability in the comment functionality. To solve this lab, submit a comment that calls the alert function when the blog post is v...