PortSwigger Labs on Dinh Tuan Kiethttps://k0z1l.github.io/categories/portswigger-labs/Recent content in PortSwigger Labs on Dinh Tuan KietHugo -- gohugo.ioen© 2026 Dinh Tuan Kiet. All rights reserved.Fri, 09 Oct 2026 00:00:00 +0000[PortSwigger] Lab 7: SameSite Lax Bypass via Method Overridehttps://k0z1l.github.io/writeups/portswigger-csrf/lab-07-samesite-lax-bypass-via-method-override/Fri, 09 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-csrf/lab-07-samesite-lax-bypass-via-method-override/[PortSwigger] Lab 5: CSRF Where Token Is Tied to Non-Session Cookiehttps://k0z1l.github.io/writeups/portswigger-csrf/lab-05-csrf-where-token-is-tied-to-non-session-cookie/Thu, 08 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-csrf/lab-05-csrf-where-token-is-tied-to-non-session-cookie/[PortSwigger] Lab 6: CSRF Where Token Is Duplicated in Cookiehttps://k0z1l.github.io/writeups/portswigger-csrf/lab-06-csrf-where-token-is-duplicated-in-cookie/Thu, 08 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-csrf/lab-06-csrf-where-token-is-duplicated-in-cookie/[PortSwigger] Lab 1: CSRF Vulnerability with No Defenseshttps://k0z1l.github.io/writeups/portswigger-csrf/lab-01-csrf-vulnerability-with-no-defenses/Wed, 07 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-csrf/lab-01-csrf-vulnerability-with-no-defenses/[PortSwigger] Lab 2: CSRF Where Token Validation Depends on Request Methodhttps://k0z1l.github.io/writeups/portswigger-csrf/lab-02-csrf-where-token-validation-depends-on-request-method/Wed, 07 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-csrf/lab-02-csrf-where-token-validation-depends-on-request-method/[PortSwigger] Lab 3: CSRF Where Token Validation Depends on Token Being Presenthttps://k0z1l.github.io/writeups/portswigger-csrf/lab-03-csrf-where-token-validation-depends-on-token-being-present/Wed, 07 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-csrf/lab-03-csrf-where-token-validation-depends-on-token-being-present/[PortSwigger] Lab 4: CSRF Where Token Is Not Tied to User Sessionhttps://k0z1l.github.io/writeups/portswigger-csrf/lab-04-csrf-where-token-is-not-tied-to-user-session/Wed, 07 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-csrf/lab-04-csrf-where-token-is-not-tied-to-user-session/[PortSwigger] Cross-Site Request Forgery (CSRF) Serieshttps://k0z1l.github.io/writeups/portswigger-csrf/Tue, 06 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-csrf/[PortSwigger] Lab 22: 0.CL Request Smugglinghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-22-http-request-smuggling-0.cl-request-smuggling/Tue, 06 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-22-http-request-smuggling-0.cl-request-smuggling/[PortSwigger] Lab 19: Web Cache Poisoning via HTTP/2 Request Tunnellinghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-19-http-request-smuggling-web-cache-poisoning-via-h2-request-tunnelling/Mon, 05 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-19-http-request-smuggling-web-cache-poisoning-via-h2-request-tunnelling/[PortSwigger] Lab 20: Client-Side Desynchttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-20-http-request-smuggling-client-side-desync/Mon, 05 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-20-http-request-smuggling-client-side-desync/[PortSwigger] Lab 21: Server-Side Pause-Based Request Smugglinghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-21-http-request-smuggling-server-side-pause-based-request-smuggling/Mon, 05 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-21-http-request-smuggling-server-side-pause-based-request-smuggling/[PortSwigger] Lab 14: HTTP/2 Request Splitting via CRLF Injectionhttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-14-http-request-smuggling-h2-request-splitting-via-crlf-injection/Sun, 04 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-14-http-request-smuggling-h2-request-splitting-via-crlf-injection/[PortSwigger] Lab 15: CL.0 Request Smugglinghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-15-http-request-smuggling-cl.0-request-smuggling/Sun, 04 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-15-http-request-smuggling-cl.0-request-smuggling/[PortSwigger] Lab 16: Exploiting HTTP Request Smuggling to Perform Web Cache Poisoninghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-16-http-request-smuggling-exploiting-http-request-smuggling-to-perform-web-cache-poisoning/Sun, 04 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-16-http-request-smuggling-exploiting-http-request-smuggling-to-perform-web-cache-poisoning/[PortSwigger] Lab 17: Exploiting HTTP Request Smuggling to Perform Web Cache Deceptionhttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-17-http-request-smuggling-exploiting-http-request-smuggling-to-perform-web-cache-deception/Sun, 04 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-17-http-request-smuggling-exploiting-http-request-smuggling-to-perform-web-cache-deception/[PortSwigger] Lab 18: Bypassing Access Controls via HTTP/2 Request Tunnellinghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-18-http-request-smuggling-bypassing-access-controls-via-h2-request-tunnelling/Sun, 04 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-18-http-request-smuggling-bypassing-access-controls-via-h2-request-tunnelling/[PortSwigger] Lab 12: H2.CL Request Smugglinghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-12-http-request-smuggling-h2.cl-request-smuggling/Sat, 03 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-12-http-request-smuggling-h2.cl-request-smuggling/[PortSwigger] Lab 13: HTTP/2 Request Smuggling via CRLF Injectionhttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-13-http-request-smuggling-h2-request-smuggling-via-crlf-injection/Sat, 03 Oct 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-13-http-request-smuggling-h2-request-smuggling-via-crlf-injection/[PortSwigger] Lab 10: Exploiting HTTP Request Smuggling to Deliver Reflected XSShttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-10-http-request-smuggling-delivering-reflected-xss/Wed, 30 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-10-http-request-smuggling-delivering-reflected-xss/[PortSwigger] Lab 11: Response Queue Poisoning via H2.TE Request Smugglinghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-11-http-request-smuggling-response-queue-poisoning-via-h2.te-request-smuggling/Wed, 30 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-11-http-request-smuggling-response-queue-poisoning-via-h2.te-request-smuggling/[PortSwigger] Lab 9: Exploiting HTTP Request Smuggling to Capture Other Users' Requestshttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-09-http-request-smuggling-capturing-other-users-requests/Wed, 30 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-09-http-request-smuggling-capturing-other-users-requests/[PortSwigger] Lab 5: Confirming a TE.CL Vulnerability via Differential Responseshttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-05-http-request-smuggling-confirming-a-te.cl-vulnerability-via-differential-responses/Tue, 29 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-05-http-request-smuggling-confirming-a-te.cl-vulnerability-via-differential-responses/[PortSwigger] Lab 6: Exploiting HTTP Request Smuggling to Bypass Front-end Security Controls (CL.TE)https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-06-http-request-smuggling-bypassing-front-end-security-controls-cl.te-vulnerability/Tue, 29 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-06-http-request-smuggling-bypassing-front-end-security-controls-cl.te-vulnerability/[PortSwigger] Lab 7: Exploiting HTTP Request Smuggling to Bypass Front-end Security Controls (TE.CL)https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-07-http-request-smuggling-bypassing-front-end-security-controls-te.cl-vulnerability/Tue, 29 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-07-http-request-smuggling-bypassing-front-end-security-controls-te.cl-vulnerability/[PortSwigger] Lab 8: Exploiting HTTP Request Smuggling to Reveal Front-end Request Rewritinghttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-08-http-request-smuggling-revealing-front-end-request-rewriting/Tue, 29 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-08-http-request-smuggling-revealing-front-end-request-rewriting/[PortSwigger] Lab 4: Confirming a CL.TE Vulnerability via Differential Responseshttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-04-http-request-smuggling-confirming-a-cl.te-vulnerability-via-differential-responses/Mon, 28 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-04-http-request-smuggling-confirming-a-cl.te-vulnerability-via-differential-responses/[PortSwigger] HTTP Request Smuggling Serieshttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/Tue, 22 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/[PortSwigger] Lab 1: Basic CL.TE Vulnerabilityhttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-01-http-request-smuggling-basic-cl.te-vulnerability/Tue, 22 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-01-http-request-smuggling-basic-cl.te-vulnerability/[PortSwigger] Lab 2: Basic TE.CL Vulnerabilityhttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-02-http-request-smuggling-basic-te.cl-vulnerability/Tue, 22 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-02-http-request-smuggling-basic-te.cl-vulnerability/[PortSwigger] Lab 3: Obfuscating the TE Headerhttps://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-03-http-request-smuggling-obfuscating-the-te-header/Tue, 22 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-request-smuggling/lab-03-http-request-smuggling-obfuscating-the-te-header/[PortSwigger] HTTP Host Header Attacks Serieshttps://k0z1l.github.io/writeups/portswigger-http-host-header-attack/Mon, 14 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/[PortSwigger] Lab 1: Basic Password Reset Poisoninghttps://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-01-basic-password-reset-poisoning/Mon, 14 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-01-basic-password-reset-poisoning/[PortSwigger] Lab 2: Host Header Authentication Bypasshttps://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-02-host-header-authentication-bypass/Mon, 14 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-02-host-header-authentication-bypass/[PortSwigger] Lab 3: Web Cache Poisoning via Ambiguous Requestshttps://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-03-web-cache-poisoning-via-ambiguous-requests/Mon, 14 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-03-web-cache-poisoning-via-ambiguous-requests/[PortSwigger] Lab 4: Routing-Based SSRFhttps://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-04-routing-based-ssrf/Mon, 14 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-04-routing-based-ssrf/[PortSwigger] Lab 5: SSRF via Flawed Request Parsinghttps://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-05-ssrf-via-flawed-request-parsing/Mon, 14 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-05-ssrf-via-flawed-request-parsing/[PortSwigger] Lab 6: Host Validation Bypass via Connection State Attackhttps://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-06-host-validation-bypass-via-connection-state-attack/Mon, 14 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-06-host-validation-bypass-via-connection-state-attack/[PortSwigger] Lab 7: Password Reset Poisoning via Dangling Markuphttps://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-07-password-reset-poisoning-via-dangling-markup/Mon, 14 Sep 2026 00:00:00 +0000https://k0z1l.github.io/writeups/portswigger-http-host-header-attack/lab-07-password-reset-poisoning-via-dangling-markup/