CurlSwiggerLabs

This repository contains writeups and solutions for PortSwigger Web Security Academy lab exercises but using basic tools instead of Burp Suite for the sheer enjoyment of learning and understanding web security, I know it's terribly unpractical but it's also more fun and challenging.

At the end of the writeup, I'll explain the developer approach to mitigate these vulnerabilities.

Check the blog here

Cool labs pending to solve

• https://portswigger.net/web-security/jwt/algorithm-confusion/lab-jwt-authentication-bypass-via-algorithm-confusion-with-no-exposed-key

• https://portswigger.net/web-security/file-upload/lab-file-upload-web-shell-upload-via-race-condition

• https://portswigger.net/web-security/websockets/lab-manipulating-handshake-to-exploit-vulnerabilities

• https://portswigger.net/web-security/cross-site-scripting/content-security-policy/lab-very-strict-csp-with-dangling-markup-attack

Do you want me to solve a specific lab? Reach out to me on discord @echoesofwhoami