One Missing Parameter Cost Me Six Hours (PortSwigger Lab)
I spent six hours trying to upgrade a non-admin user to admin, convinced I was missing some clever...
Aug 24, 20265 min read0 reactions0 comments
Back to articles Aug 24, 2026 
Aug 18, 2026
Jan 14, 2026
Jan 14, 2026
Jan 7, 2026
Nov 8, 2025
Nov 8, 2025
Tag archive
#portswigger
What a Single File Name Taught Me About IDOR (PortSwigger Lab)
My transcript downloaded as 2.txt. That was the entire vulnerability, sitting right there in a file...
Aug 18, 20263 min read0 reactions0 comments
C
Jul 29, 2026Configuring SAML SSO with Okta Using PortSwigger
portswigger-c9708498.webp alt: Configuring SAML SSO with Okta - PortSwigger relative:...
Jul 29, 20264 min read0 reactions0 comments
C
Jul 26, 2026Configuring LDAP SSO for Burp Suite DAST
LDAP single sign-on for Burp Suite DAST allows users to authenticate to Burp Suite using their...
Jul 26, 20263 min read0 reactions0 comments
L
Jul 7, 2026Lab: Exploiting an API endpoint using documentation
Lab: Exploiting an API Endpoint Using Documentation 1. Thông tin lab Tên lab:...
Jul 7, 20264 min read0 reactions0 comments
L
Jul 7, 2026Lab: Finding and exploiting an unused API endpoint
Lab: Finding and exploiting an unused API endpoint 1. Thông tin lab Tên lab:...
Jul 7, 20267 min read0 reactions0 comments
B
Jun 17, 2026Bridging the Gap: Strategies to Transition from Apprentice to Practitioner in PortSwigger Labs
Introduction to PortSwigger Labs The PortSwigger Web Security Academy serves as a critical...
Jun 17, 202610 min read4 reactions1 comments
Lab: Accessing private GraphQL posts
Author: travondatrack Date: 14/01/2026 Category: Pentest | Web | Security Difficulty: Easy Tags:...
Jan 14, 20262 min read0 reactions0 comments
Lab: Finding a hidden GraphQL endpoint
Author: travondatrack Date: 14/01/2026 Category: Pentest | Web | Security Difficulty:...
Jan 14, 20262 min read0 reactions0 comments
Application security: thinking backwards
📜 Developers often focus on what library or what tool they can use to secure their microservices....
Jan 7, 20262 min read1 reactions0 comments
Lab: Exploiting vulnerabilities in LLM APIs
Tác giả: travondatrack Ngày: (08/11/2025) 1. Tóm tắt Xoá file /home/carlos/morale.txt...
Nov 8, 20253 min read0 reactions0 comments
Lab: Exploiting LLM APIs with excessive agency
Mục tiêu: Minh hoạ rủi ro khi một LLM được cấp khả năng thực thi trực tiếp trên hệ thống (excessive...
Nov 8, 20252 min read0 reactions0 comments