PortSwiggerLabs 49
- PortSwiggerlabs: Blind OS command injection with output redirection
- PortSwiggerlabs: Blind OS command injection with time delays
- PortSwiggerlabs: File path traversal, validation of file extension with null byte bypass
- PortSwiggerlabs: File path traversal, validation of start of path
- PortSwiggerlabs: File path traversal, traversal sequences stripped with superfluous URL-decode
- PortSwiggerlabs: OS command injection, simple case
- PortSwiggerlabs: File path traversal, traversal sequences stripped non-recursively
- PortSwiggerlabs: File path traversal, traversal sequences blocked with absolute path bypass
- PortSwiggerlabs: File path traversal, simple case
- PortSwiggerlabs: CORS vulnerability with trusted null origin
- PortSwiggerlabs: CORS vulnerability with basic origin reflection
- PortSwiggerlabs: HTTP request smuggling, obfuscating the TE header
- PortSwiggerlabs: H2.CL request smuggling
- PortSwiggerlabs: Response queue poisoning via H2.TE request smuggling
- PortSwiggerlabs: HTTP/2 request smuggling via CRLF injection
- PortSwiggerlabs: Exploiting HTTP request smuggling to deliver reflected XSS
- PortSwiggerlabs: Exploiting HTTP request smuggling to capture other users' requests
- PortSwiggerlabs: Exploiting HTTP request smuggling to reveal front-end request rewriting
- PortSwiggerlabs: Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability
- PortSwiggerlabs: Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vulnerability
- PortSwiggerlabs: HTTP request smuggling, confirming a TE.CL vulnerability via differential responses
- PortSwiggerlabs: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
- PortSwiggerlabs: Exploiting PHP deserialization with a pre-built gadget chain
- PortSwiggerlabs: Exploiting Ruby deserialization using a documented gadget chain
- PortSwiggerlabs: Exploiting Java deserialization with Apache Commons
- PortSwiggerlabs: Arbitrary object injection in PHP
- PortSwiggerlabs: Using application functionality to exploit insecure deserialization
- PortSwiggerlabs: Modifying serialized data types
- PortSwiggerlabs: Modifying serialized objects
- PortSwiggerlabs: Reflected XSS into attribute with angle brackets HTML-encoded
- PortSwiggerlabs: Stored XSS into anchor href attribute with double quotes HTML-encoded
- PortSwiggerlabs: DOM XSS in jQuery anchor href attribute sink using location.search source
- PortSwiggerlabs: DOM XSS in innerHTML sink using source location.search
- PortSwiggerlabs: DOM XSS in innerHTML sink using source location.search
- PortSwiggerlabs: DOM XSS in document.write sink using source location.search
- PortSwiggerlabs: Stored XSS into HTML context with nothing encoded
- PortSwiggerlabs: Reflected XSS into HTML context with nothing encoded
- PortSwiggerlabs: Blind SQL injection with time delays
- PortSwiggerlabs: Visible error-based SQL injection
- PortSwiggerlabs: SQL injection UNION attack, finding a column containing text
- PortSwiggerlabs: SQL injection UNION attack, retrieving multiple values in a single column
- PortSwiggerlabs: SQL injection UNION attack, retrieving data from other tables
- PortSwiggerlabs: SQL injection UNION attack, determining the number of columns returned by the query
- PortSwiggerlabs: SQL injection attack, listing the database contents on Oracle
- PortSwiggerlabs: SQL injection attack, listing the database contents on non-Oracle databases
- PortSwiggerlabs: SQL injection attack, querying the database type and version on MySQL and Microsoft
- PortSwiggerlabs: SQL injection attack, querying the database type and version on Oracle
- PortSwiggerlabs: SQL injection vulnerability allowing login bypass
- PortSwiggerlabs: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data