A collection of clear, beginner-friendly solutions to the PortSwigger Web Security Academy Labs.
This repository contains practical write-ups for labs based on real-world web vulnerabilities taught by PortSwigger. Each solution includes:
- Easy-to-follow steps 🪜
- Key payloads used 💣
- Observations and concepts 🧠
- Difficulty level (Apprentice, Practitioner, etc.)
- ✅ Access Control
- 🔜 SQL Injection
- 🔜 Authentication
Each file is named using this format:
[level]_[short-description].md
Example: apprentice_simple-file-traversal.md
Each file includes:
- Lab Title
- Step-by-step guide
- Payloads used
path-traversal/apprentice_simple-file-traversal.mdpractitioner_absolute-path-bypass.md
sql-injection/apprentice_basic-login-bypass.mdpractitioner_union-based-injection.md
- 🛠 Reinforce my own understanding
- 🧩 Help others learning the same
- 💼 Showcase real problem-solving skills
⭐ If you find this helpful, consider giving the repo a star!
📬 Have suggestions or improvements? Feel free to open an issue or pull request.