Write-ups
Ctrlk
Personal WebsiteGithubLinkedIn
  • Home
  • Blue Team Labs Online
  • bWAPP
  • Command Challenge
  • CryptoHack
  • CSAW 2023
  • CTFLearn
  • CyberDefenders
  • DVWA
  • Ethernaut
  • Exploit Education
  • Google CTF - Beginner's Quest
  • Hacker101
  • LetsDefend
  • Microcorruption
  • NetGarage IO
  • OverTheWire
  • PicoCTF
  • PortSwigger labs
    • Client-side topics
    • Server-side topics
      • SQL injection
      • Authentication
        • Username enumeration via subtly different responses
        • Password reset broken logic
        • Username enumeration via different responses
        • 2FA simple bypass
      • Path traversal
      • Command injection
      • Business logic vulnerabilities
      • Information disclosure
      • Access control
      • Server-side request forgery (SSRF)
      • XXE injection
  • Pwn College
  • pwanable.kr
  • Root Me
  • ROP Emporium
  • TryHackMe
  • Under The Wire
  • W3Challs
  • Websec.fr
Powered by GitBook
On this page

Was this helpful?

  1. PortSwigger labs
  2. Server-side topics

Authentication

  • Username enumeration via different responses

  • 2FA simple bypass

  • Password reset broken logic

  • Username enumeration via subtly different responses

Last updated 1 year ago

Was this helpful?