PortSwigger 26
- SQL injection with filter bypass via XML encoding
- Blind SQL injection with time delays and Information retrieval
- Visible error-based SQL injection
- Blind SQL injection with conditional errors
- SQL injection UNION attack, retrieving multiple values in a single column
- Blind SQL injection with conditional responses
- SQL injection UNION attack, retrieving data from other tables
- PortSwigger SQL Injection Lab 8 — Finding a Column That Accepts Strings
- PortSwigger SQL Injection Lab 7 — Determining the Number of Columns
- PortSwigger SQL Injection Lab 6 — Listing Database Contents on Oracle
- PortSwigger SQL Injection Lab 5 — Listing Database Contents on Non-Oracle Databases
- PortSwigger SQL Injection Lab 4 — MySQL Version Enumeration
- PortSwigger SQL Injection Lab 3 — Oracle Version Enumeration
- PortSwigger SQL Injection Lab 2 — Login Bypass
- PortSwigger SQL Injection Lab 1 — Retrieving Hidden Data
- Reflected XSS with Event Handlers and href Attributes Blocked
- Reflected XSS in a JavaScript URL with Some Characters Blocked
- Reflected XSS Protected by Very Strict CSP with Dangling Markup Attack
- Reflected XSS Protected by CSP with CSP Bypass
- Exploiting XSS to Capture Passwords
- Lab - Exploiting XSS to Steal Cookies
- Reflected XSS into a Template Literal with Quotes and Backticks Unicode-Escaped
- Stored XSS into onclick Event with Angle Brackets and Double Quotes HTML-Encoded
- Reflected XSS into a JavaScript String with Angle Brackets and Double Quotes HTML-Encoded and Single Quotes Escaped
- Reflected XSS into a JavaScript String with Single Quote and Backslash Escaped
- Reflected XSS in a Canonical Link Tag