Web Security Academy

Free web security training from @PortSwigger

[Web Security Academy @WebSecAcademy]

@tech Great point! Knowing where the input lands is most of the battle. Thanks for using the labs with your students!

[Web Security Academy @WebSecAcademy]

Template probing indicates server-side expression evaluation?

Next, confirm where the input lands: plaintext template context or code context. Then identify the template engine, because syntax and results can differ between engines.

The change in response is the next lead, though impact varies from application to application.

Test the workflow in the free SSTI labs 👇
https://t.co/5GEK7nNDvz

[Web Security Academy @WebSecAcademy]

@Cybergez @cybervoyrax Very true! The small checks are usually where it goes wrong!

[Web Security Academy @WebSecAcademy]

@thecyberinsane Ha! If only that header worked!

[Web Security Academy @WebSecAcademy]

In Burp Repeater, try changing the file’s Content-Type to image/jpeg.

If a previously blocked upload is now accepted, the server may be trusting the multipart header instead of checking the file itself.

That header is supplied by the client. Validation also needs to consider the filename, extension, actual contents, storage location, and whether the server can execute the uploaded file.

Try it in the file upload labs 👇
https://t.co/4DRoefS1M5

[Web Security Academy @WebSecAcademy]

@Fuji_Exams Thanks for recommending the Academy! Glad it is helping people get started!

[Web Security Academy @WebSecAcademy]

@V0lit3 @Tvtc_df_tabuk Thank you for running a workshop with the Academy labs! Great to see them used to teach others!

[Web Security Academy @WebSecAcademy]

@h0rus3c @CrypticZeusDeX @yeswehack @Hacker0x01 Thanks for the mention! Consistency really is the main thing. Good advice!

[Web Security Academy @WebSecAcademy]

@wh0isdxk @miwamarii Thanks for the recommendation! Appreciate the kind words!

[Web Security Academy @WebSecAcademy]

@itx_l0b0 @hanid4186 @Itx_Shad0w @SCAREFACE_1030 Thanks for the mention! Reading write-ups alongside the labs is a good habit!

[Web Security Academy @WebSecAcademy]

@0xConda @AmirizeW54059 Thanks for the recommendation! The OWASP Top 10 plus the labs is a solid starting point!

[Web Security Academy @WebSecAcademy]

@ninjaaexe Thanks for the mention! Good to hear the labs helped in interviews!

[Web Security Academy @WebSecAcademy]

@hxp7th @mcelxhi Thanks for the recommendation! Ten a day is ambitious, but consistency is the main thing!

[Web Security Academy @WebSecAcademy]

@R3DD404 Sorry to hear that! Which lab is it? Let us know and we will pass it along.

[Web Security Academy @WebSecAcademy]

@quinex_amd @weezerOSINT Common experience! A lot of people find it helps to pick one vulnerability class you know well and look for it across many targets, rather than looking for everything on one. Good luck with the hunting!

[Web Security Academy @WebSecAcademy]

@johnberchy @ITx_The_goAt @itx_l0b0 @SCA3F4CE @Bugcrowd @defronixacademy Most labs have a video solution below the written one on the lab page! Worth checking there first. Good luck!

[Web Security Academy @WebSecAcademy]

@Cyber_sly A hint for that one: the response time depends on the length of the password you send. Try a much longer one and compare the timings!

[Web Security Academy @WebSecAcademy]

@theXSSrat Thanks for sharing the research! CSS injection gets overlooked a lot. Appreciate it!

[Web Security Academy @WebSecAcademy]

@0x7hierri Interesting test! Good to see the labs being used to check tooling. Thanks for sharing!

[Web Security Academy @WebSecAcademy]

@P0ystick @maroladry Agreed, DOM XSS makes a lot more sense once you can read a bit of JavaScript. Well done for pushing through!

[Web Security Academy @WebSecAcademy]

@maroladry Well done for sticking with it! The DOM XSS labs are tricky at first. Keep going!

[Web Security Academy @WebSecAcademy]

@ife0x01 @PortSwigger @4osp3l @_DeejustDee @KoredeSec @malik_cybersec @DefendWithFelix Congratulations on finishing the SQL injection path! Day 66 is good consistency. Keep it up!