A collection of clear, beginner-friendly solutions to the PortSwigger Web Security Academy Labs.
This repository contains practical write-ups for labs based on real-world web vulnerabilities taught by PortSwigger. Each solution includes:
- Easy-to-follow steps πͺ
- Key payloads used π£
- Observations and concepts π§
- Difficulty level (Apprentice, Practitioner, etc.)
- β Access Control
- π SQL Injection
- π Authentication
Each file is named using this format:
[level]_[short-description].md
Example: apprentice_simple-file-traversal.md
Each file includes:
- Lab Title
- Step-by-step guide
- Payloads used
path-traversal/
apprentice_simple-file-traversal.md
practitioner_absolute-path-bypass.md
sql-injection/
apprentice_basic-login-bypass.md
practitioner_union-based-injection.md
- π Reinforce my own understanding
- π§© Help others learning the same
- πΌ Showcase real problem-solving skills
β If you find this helpful, consider giving the repo a star!
π¬ Have suggestions or improvements? Feel free to open an issue or pull request.