Overview
Write Ups Compilations/Resources
Main Resources
Labs
Cross Site Request Forgery
- Cross Site Request Forgery (CSRF)
Missing Access Controls
- Missing Access Controls
LFI / Directory Traversal
- Local File Inclusion
XXE
- XML External Entity (XXE)
Injection
SSRF
- Server-Side Request Forgery (SSRF)
  - SSRF Write-ups
  - Source Code Review
Unvalidated Redirects and Forwards
- Unvalidated Redirects and Forwards
  - Writeups
  - Source Code Examples
Verbose Error Messages and Stack Traces
- Verbose Error Messages and Stack Traces
  - Write-ups

Powered by GitBook

On this page

Was this helpful?

Labs

PreviousSource Code Examples NextXML External Entity (XXE)

Last updated 3 years ago

Lab: File path traversal, traversal sequences blocked with absolute path bypass | Web Security AcademyWebSecAcademy

Lab: File path traversal, validation of file extension with null byte bypass | Web Security AcademyWebSecAcademy

Lab: File path traversal, validation of start of path | Web Security AcademyWebSecAcademy

Lab: File path traversal, traversal sequences stripped non-recursively | Web Security AcademyWebSecAcademy

Lab: File path traversal, traversal sequences stripped with superfluous URL-decode | Web Security AcademyWebSecAcademy

Lab: File path traversal, simple case | Web Security AcademyWebSecAcademy