PortSwigger Academy Labs Walkthrough
A walkthrough series of PortSwigger Web Security Academy labs, covering the topics included in the Burp Suite Certified Practitioner (BSCP) exam.
Write-ups / Tag
bscp
37 write-ups with this tag.
PortSwigger Walkthrough - Exploiting AI agents to perform destructive actions
Walkthrough of PortSwigger's 'Exploiting AI agents to perform destructive actions' lab.
PortSwigger Walkthrough - Exploiting AI agents to exfiltrate sensitive information
Walkthrough of PortSwigger's 'Exploiting AI agents to exfiltrate sensitive information' lab.
PortSwigger Walkthrough - Exploiting AI agents to trigger secondary vulnerabilities
Walkthrough of PortSwigger's 'Exploiting AI agents to trigger secondary vulnerabilities' lab.
PortSwigger Walkthrough - Exploiting LLM APIs with excessive agency
Walkthrough of PortSwigger's 'Exploiting LLM APIs with excessive agency' lab.
PortSwigger Walkthrough - Bypassing AI scanner defenses to exfiltrate sensitive information
Walkthrough of PortSwigger's 'Bypassing AI scanner defenses to exfiltrate sensitive information' lab.
PortSwigger Walkthrough - Exploiting vulnerabilities in LLM APIs
Walkthrough of PortSwigger's 'Exploiting vulnerabilities in LLM APIs' lab.
PortSwigger Walkthrough - Indirect prompt injection
Walkthrough of PortSwigger's 'Indirect prompt injection' lab.
PortSwigger Walkthrough - CORS vulnerability with basic origin reflection
Walkthrough of PortSwigger's 'CORS vulnerability with basic origin reflection' lab.
PortSwigger Walkthrough - CORS vulnerability with trusted insecure protocols
Walkthrough of PortSwigger's 'CORS vulnerability with trusted insecure protocols' lab.
PortSwigger Walkthrough - CORS vulnerability with trusted null origin
Walkthrough of PortSwigger's 'CORS vulnerability with trusted null origin' lab.
PortSwigger Walkthrough - Basic SSRF against another back-end system
Walkthrough of PortSwigger's 'Basic SSRF against another back-end system' lab.
PortSwigger Walkthrough - Basic SSRF against the local server
Walkthrough of PortSwigger's 'Basic SSRF against the local server' lab.
PortSwigger Walkthrough - SSRF with blacklist-based input filter
Walkthrough of PortSwigger's 'SSRF with blacklist-based input filter' lab.
PortSwigger Walkthrough - Blind SSRF with out-of-band detection
Walkthrough of PortSwigger's 'Blind SSRF with out-of-band detection' lab.
PortSwigger Walkthrough - SSRF with filter bypass via open redirection vulnerability
Walkthrough of PortSwigger's 'SSRF with filter bypass via open redirection vulnerability' lab.
PortSwigger Walkthrough - Cross-site WebSocket hijacking
Walkthrough of PortSwigger's 'Cross-site WebSocket hijacking' lab.
PortSwigger Walkthrough - Manipulating the WebSocket handshake to exploit vulnerabilities
Walkthrough of PortSwigger's 'Manipulating the WebSocket handshake to exploit vulnerabilities' lab.
PortSwigger Walkthrough - Manipulating WebSocket messages to exploit vulnerabilities
Walkthrough of PortSwigger's 'Manipulating WebSocket messages to exploit vulnerabilities' lab.
PortSwigger Walkthrough - 2FA Broken Logic
Walkthrough of PortSwigger's '2FA Broken Logic' lab.
PortSwigger Walkthrough - 2FA Simple Bypass
Walkthrough of PortSwigger's '2FA Simple Bypass' lab.
PortSwigger Walkthrough - Broken brute-force protection, IP block
Walkthrough of PortSwigger's 'Broken brute-force protection' lab.
PortSwigger Walkthrough - Brute-forcing a stay-logged-in cookie
Walkthrough of PortSwigger's 'Brute-forcing a stay-logged-in cookie' lab.
PortSwigger Walkthrough - Offline password cracking
Walkthrough of PortSwigger's 'Offline password cracking' lab.
PortSwigger Walkthrough - Password brute-force via password change
Walkthrough of PortSwigger's 'Password brute-force via password change' lab.
PortSwigger Walkthrough - Password reset broken logic
Walkthrough of PortSwigger's 'Password reset broken logic' lab.
PortSwigger Walkthrough - Password reset poisoning via middleware
Walkthrough of PortSwigger's 'Password reset poisoning via middleware' lab: steal a reset token by spoofing the X-Forwarded-Host header.
PortSwigger Walkthrough - File path traversal, traversal sequences blocked with absolute path bypass
Walkthrough of PortSwigger's 'File path traversal, traversal sequences blocked with absolute path bypass' lab.
PortSwigger Walkthrough - File path traversal, traversal sequences stripped non-recursively
Walkthrough of PortSwigger's 'File path traversal, traversal sequences stripped non-recursively' lab.
PortSwigger Walkthrough - File path traversal, traversal sequences stripped with superfluous URL-decode
Walkthrough of PortSwigger's 'File path traversal, traversal sequences stripped with superfluous URL-decode' lab.
PortSwigger Walkthrough - File path traversal, simple case
Walkthrough of PortSwigger's 'File path traversal, simple case' lab.
PortSwigger Walkthrough - File path traversal, validation of file extension with null byte bypass
Walkthrough of PortSwigger's 'File path traversal, validation of file extension with null byte bypass' lab.
PortSwigger Walkthrough - File path traversal, validation of start of path
Walkthrough of PortSwigger's 'File path traversal, validation of start of path' lab.
PortSwigger Walkthrough - Username enumeration via account lock
Walkthrough of PortSwigger's 'Username enumeration via account lock' lab.
PortSwigger Walkthrough - Username enumeration via different responses
Walkthrough of PortSwigger's 'Username enumeration via different responses' lab.
PortSwigger Walkthrough - Username enumeration via response timing
Walkthrough of PortSwigger's 'Username enumeration via response timing' lab.
PortSwigger Walkthrough - Username enumeration via subtly different responses
Walkthrough of PortSwigger's 'Username enumeration via subtly different responses' lab.