Academy · Videos

Watch it done

Short walkthroughs — the technique, start to finish. Pair one with the concept and the labs in the same category.

Labs Courses Concepts Videos Academy

All Authentication bypass Broken access control / IDOR SQL / command injection Business logic flaw Privilege escalation Cryptographic weakness CSRF Insecure deserialization Information disclosure Remote code execution Race condition Access control & business logic Web application Server-side request forgery (SSRF)Subdomain takeover Cross-site scripting (XSS)

Cross-site scripting (XSS)

XSS: reflected, stored and DOM