↓ Skip to main content

PortSwigger Labs

[PortSwigger] Lab 7: SameSite Lax Bypass via Method Override

9 October 2026·1814 words·9 mins

[PortSwigger] Lab 6: CSRF Where Token Is Duplicated in Cookie

8 October 2026·2179 words·11 mins

[PortSwigger] Lab 5: CSRF Where Token Is Tied to Non-Session Cookie

8 October 2026·1993 words·10 mins

[PortSwigger] Lab 4: CSRF Where Token Is Not Tied to User Session

7 October 2026·1863 words·9 mins

[PortSwigger] Lab 3: CSRF Where Token Validation Depends on Token Being Present

7 October 2026·1818 words·9 mins

[PortSwigger] Lab 2: CSRF Where Token Validation Depends on Request Method

7 October 2026·1960 words·10 mins

[PortSwigger] Lab 1: CSRF Vulnerability with No Defenses

7 October 2026·2071 words·10 mins

[PortSwigger] Lab 22: 0.CL Request Smuggling

6 October 2026·3111 words·15 mins

[PortSwigger] Cross-Site Request Forgery (CSRF) Series

6 October 2026·718 words·4 mins

[PortSwigger] Lab 21: Server-Side Pause-Based Request Smuggling

5 October 2026·2894 words·14 mins