Labs 42
- SQL injection with filter bypass via XML encoding
- Blind SQL injection with time delays and Information retrieval
- Visible error-based SQL injection
- Blind SQL injection with conditional errors
- SQL injection UNION attack, retrieving multiple values in a single column
- Blind SQL injection with conditional responses
- SQL injection UNION attack, retrieving data from other tables
- PortSwigger SQL Injection Lab 8 — Finding a Column That Accepts Strings
- PortSwigger SQL Injection Lab 7 — Determining the Number of Columns
- PortSwigger SQL Injection Lab 6 — Listing Database Contents on Oracle
- PortSwigger SQL Injection Lab 5 — Listing Database Contents on Non-Oracle Databases
- PortSwigger SQL Injection Lab 4 — MySQL Version Enumeration
- PortSwigger SQL Injection Lab 3 — Oracle Version Enumeration
- PortSwigger SQL Injection Lab 2 — Login Bypass
- PortSwigger SQL Injection Lab 1 — Retrieving Hidden Data
- Reflected XSS with Event Handlers and href Attributes Blocked
- Reflected XSS in a JavaScript URL with Some Characters Blocked
- Reflected XSS Protected by Very Strict CSP with Dangling Markup Attack
- Reflected XSS Protected by CSP with CSP Bypass
- Exploiting XSS to Capture Passwords
- Lab - Exploiting XSS to Steal Cookies
- Reflected XSS into a Template Literal with Quotes and Backticks Unicode-Escaped
- Stored XSS into onclick Event with Angle Brackets and Double Quotes HTML-Encoded
- Reflected XSS into a JavaScript String with Angle Brackets and Double Quotes HTML-Encoded and Single Quotes Escaped
- Reflected XSS into a JavaScript String with Single Quote and Backslash Escaped
- Reflected XSS in a Canonical Link Tag
- Lab - Reflected XSS with some SVG markup allowed
- Lab - Reflected XSS into HTML context with all tags blocked except custom ones
- Stored DOM XSS
- Reflected XSS into HTML context with most tags and attributes blocked
- Stored XSS into anchor href attribute with double quotes HTML-encoded
- Reflected XSS into attribute with angle brackets HTML-encoded
- Reflected XSS into a JavaScript string with angle brackets HTML encoded
- Reflected DOM XSS
- DOM XSS in jQuery selector sink using a hashchange event
- DOM XSS in document.write sink using source location.search inside a select element
- DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded
- Stored XSS into HTML context with nothing encoded
- DOM XSS in jQuery anchor href attribute sink using location.search source
- DOM XSS in innerHTML sink using source location.search
- DOM XSS in document.write sink using source location.search
- Reflected XSS into HTML context with nothing encoded