Wednesday, 17 April 2024

Web Labs Finished

I am proud to say that have finally completed my labs for most common web vulnerabilities. Coded most in PHP and some in Python. Have included Hint button to describe the vulnerability and its mitigation.

  1. CORS and CSRF
    • CORS Information Leakage
    • CSRF Change Email Functionality
  2. Directory Traversal
    • Absolute Path Directory Traversal
    • Relative Path Directory Traversal
  3. XSS 
    • Stored XSS
    • Reflected XSS
    • DOM Reflected XSS
    • DOM Stored XSS
  4. XXE
    • OOB XXE
    • XXE File Retrieval
  5. SSTI
    • Python Jinja2
  6. IDOR
    • Username Identifiers
  7. SSRF
    • SSRF to Internal AWS Instance Information Leakage

Sample Screenshots of the Labs




No comments:

Post a Comment

Friday Fun Pentest Series - 14 - Reflected XSS - fronsetiav1.1

  Description - It was found that the application was vulnerable to Reflected XSS Reflected XSS  #1 - " show_operations.jsp " Step...