Web Application Access Control Vulnerabilities
This note covers Broken Authentication in web applications — PortSwigger labs that demonstrate unprotected admin endpoints,…
Web Application Race Conditions Vulnerabilities
This note covers race condition vulnerabilities in web applications, where multiple processes or requests are executed simultaneously, leading…
Web Application Information Disclosure
Information disclosure issues often reveal sensitive data such as framework versions, environment variables, source code, or even admin bypass…
Web Application Business Logic Vulnerabilites
Collection of PortSwigger labs demonstrating business logic vulnerabilities in web applications, including flaws in workflow validation,…
Web Application Authentication Vulnerabilites
Comprehensive notes and practical lab walkthroughs on web application authentication vulnerabilities. Covers topics such as username…