PortSwigger Academy Labs Walkthrough
A walkthrough series of PortSwigger Web Security Academy labs, covering the topics included in the Burp Suite Certified Practitioner (BSCP) exam.
write-ups
Lab write-ups
Technical write-ups of PortSwigger Academy labs and DVWA, grouped by series. Opinions and process live in the blog.
filter
Showing all 56 write-ups.
more tags 23
PortSwigger Academy
1 entry
Authentication
12 entries
PortSwigger Walkthrough - 2FA Broken Logic
Walkthrough of PortSwigger's '2FA Broken Logic' lab.
PortSwigger Walkthrough - 2FA Simple Bypass
Walkthrough of PortSwigger's '2FA Simple Bypass' lab.
PortSwigger Walkthrough - Broken brute-force protection, IP block
Walkthrough of PortSwigger's 'Broken brute-force protection' lab.
PortSwigger Walkthrough - Brute-forcing a stay-logged-in cookie
Walkthrough of PortSwigger's 'Brute-forcing a stay-logged-in cookie' lab.
PortSwigger Walkthrough - Offline password cracking
Walkthrough of PortSwigger's 'Offline password cracking' lab.
PortSwigger Walkthrough - Password brute-force via password change
Walkthrough of PortSwigger's 'Password brute-force via password change' lab.
PortSwigger Walkthrough - Password reset broken logic
Walkthrough of PortSwigger's 'Password reset broken logic' lab.
PortSwigger Walkthrough - Password reset poisoning via middleware
Walkthrough of PortSwigger's 'Password reset poisoning via middleware' lab: steal a reset token by spoofing the X-Forwarded-Host header.
PortSwigger Walkthrough - Username enumeration via account lock
Walkthrough of PortSwigger's 'Username enumeration via account lock' lab.
PortSwigger Walkthrough - Username enumeration via different responses
Walkthrough of PortSwigger's 'Username enumeration via different responses' lab.
PortSwigger Walkthrough - Username enumeration via response timing
Walkthrough of PortSwigger's 'Username enumeration via response timing' lab.
PortSwigger Walkthrough - Username enumeration via subtly different responses
Walkthrough of PortSwigger's 'Username enumeration via subtly different responses' lab.
CORS
3 entries
PortSwigger Walkthrough - CORS vulnerability with basic origin reflection
Walkthrough of PortSwigger's 'CORS vulnerability with basic origin reflection' lab.
PortSwigger Walkthrough - CORS vulnerability with trusted insecure protocols
Walkthrough of PortSwigger's 'CORS vulnerability with trusted insecure protocols' lab.
PortSwigger Walkthrough - CORS vulnerability with trusted null origin
Walkthrough of PortSwigger's 'CORS vulnerability with trusted null origin' lab.
Path traversal
6 entries
PortSwigger Walkthrough - File path traversal, traversal sequences blocked with absolute path bypass
Walkthrough of PortSwigger's 'File path traversal, traversal sequences blocked with absolute path bypass' lab.
PortSwigger Walkthrough - File path traversal, traversal sequences stripped non-recursively
Walkthrough of PortSwigger's 'File path traversal, traversal sequences stripped non-recursively' lab.
PortSwigger Walkthrough - File path traversal, traversal sequences stripped with superfluous URL-decode
Walkthrough of PortSwigger's 'File path traversal, traversal sequences stripped with superfluous URL-decode' lab.
PortSwigger Walkthrough - File path traversal, simple case
Walkthrough of PortSwigger's 'File path traversal, simple case' lab.
PortSwigger Walkthrough - File path traversal, validation of file extension with null byte bypass
Walkthrough of PortSwigger's 'File path traversal, validation of file extension with null byte bypass' lab.
PortSwigger Walkthrough - File path traversal, validation of start of path
Walkthrough of PortSwigger's 'File path traversal, validation of start of path' lab.
SSRF
5 entries
PortSwigger Walkthrough - Basic SSRF against another back-end system
Walkthrough of PortSwigger's 'Basic SSRF against another back-end system' lab.
PortSwigger Walkthrough - Basic SSRF against the local server
Walkthrough of PortSwigger's 'Basic SSRF against the local server' lab.
PortSwigger Walkthrough - SSRF with blacklist-based input filter
Walkthrough of PortSwigger's 'SSRF with blacklist-based input filter' lab.
PortSwigger Walkthrough - Blind SSRF with out-of-band detection
Walkthrough of PortSwigger's 'Blind SSRF with out-of-band detection' lab.
PortSwigger Walkthrough - SSRF with filter bypass via open redirection vulnerability
Walkthrough of PortSwigger's 'SSRF with filter bypass via open redirection vulnerability' lab.
Web LLM
7 entries
PortSwigger Walkthrough - Exploiting AI agents to perform destructive actions
Walkthrough of PortSwigger's 'Exploiting AI agents to perform destructive actions' lab.
PortSwigger Walkthrough - Exploiting AI agents to exfiltrate sensitive information
Walkthrough of PortSwigger's 'Exploiting AI agents to exfiltrate sensitive information' lab.
PortSwigger Walkthrough - Exploiting AI agents to trigger secondary vulnerabilities
Walkthrough of PortSwigger's 'Exploiting AI agents to trigger secondary vulnerabilities' lab.
PortSwigger Walkthrough - Exploiting LLM APIs with excessive agency
Walkthrough of PortSwigger's 'Exploiting LLM APIs with excessive agency' lab.
PortSwigger Walkthrough - Bypassing AI scanner defenses to exfiltrate sensitive information
Walkthrough of PortSwigger's 'Bypassing AI scanner defenses to exfiltrate sensitive information' lab.
PortSwigger Walkthrough - Exploiting vulnerabilities in LLM APIs
Walkthrough of PortSwigger's 'Exploiting vulnerabilities in LLM APIs' lab.
PortSwigger Walkthrough - Indirect prompt injection
Walkthrough of PortSwigger's 'Indirect prompt injection' lab.
WebSockets
3 entries
PortSwigger Walkthrough - Cross-site WebSocket hijacking
Walkthrough of PortSwigger's 'Cross-site WebSocket hijacking' lab.
PortSwigger Walkthrough - Manipulating the WebSocket handshake to exploit vulnerabilities
Walkthrough of PortSwigger's 'Manipulating the WebSocket handshake to exploit vulnerabilities' lab.
PortSwigger Walkthrough - Manipulating WebSocket messages to exploit vulnerabilities
Walkthrough of PortSwigger's 'Manipulating WebSocket messages to exploit vulnerabilities' lab.
DVWA
19 entries
DVWA Complete Walkthrough
A complete (more or less) walkthrough of the Damn Vulnerable Web Application (DVWA) for security testing and learning purposes.
DVWA Walkthrough I - Brute Force
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 1, Brute Force.
DVWA Walkthrough II - Command Injection
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 2, Command Injection.
DVWA Walkthrough III - Cross Site Request Forgery (CSRF)
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 3, Cross Site Request Forgery (CSRF).
DVWA Walkthrough IV - File Inclusion
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 4, File Inclusion.
DVWA Walkthrough V - File Upload
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 5, File Upload.
DVWA Walkthrough VI - Insecure CAPTCHA
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 6, Insecure CAPTCHA.
DVWA Walkthrough VII - SQL Injection
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 7, SQL Injection.
DVWA Walkthrough VIII - SQL Injection (Blind)
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 8, SQL Injection (Blind).
DVWA Walkthrough IX - Weak Session IDs
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 9, Weak Session IDs.
DVWA Walkthrough X - DOM Based Cross Site Scripting (XSS)
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 10, DOM Based Cross Site Scripting (XSS).
DVWA Walkthrough XI - Reflected Cross Site Scripting (XSS)
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 11, Reflected Cross Site Scripting (XSS).
DVWA Walkthrough XII - Stored Cross Site Scripting (XSS)
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 12, Stored Cross Site Scripting (XSS).
DVWA Walkthrough XIII - Content-Security Policy Bypass
A walkthrough of the Damn Vulnerable Web Application (DVWA) part 13, Content-Security Policy (CSP) Bypass.
DVWA Walkthrough XIV - JavaScript Attacks
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 14, JavaScript Attacks.
DVWA Walkthrough XV - Authorisation Bypass
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 15, Authorisation Bypass.
DVWA Walkthrough XVI - Open HTTP Redirect
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 16, Open HTTP Redirect.
DVWA Walkthrough XVII - Cryptography
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 17, Cryptography.
DVWA Walkthrough XVIII - API Security
A walkthrough of the Damn Vulnerable Web Application (DVWA) module 18, API Security.
