CSRF where token validation depends on request method
Laboratorio de Portswigger sobre CSRF
Justice-Reaper
CSRF vulnerability with no defenses
Laboratorio de Portswigger sobre CSRF
Exploiting NoSQL operator injection to extract unknown fields
Laboratorio de Portswigger sobre NoSQLI
Exploiting NoSQL injection to extract data
Laboratorio de Portswigger sobre NoSQLI
Exploiting NoSQL operator injection to bypass authentication
Laboratorio de Portswigger sobre NoSQLI
Detecting NoSQL injection
Laboratorio de Portswigger sobre NoSQLI
Bypassing GraphQL brute force protections
Laboratorio de Portswigger sobre GraphQL API
Finding a hidden GraphQL endpoint
Laboratorio de Portswigger sobre GraphQL API
Accidental exposure of private GraphQL fields
Laboratorio de Portswigger sobre GraphQL API
Accessing private GraphQL posts
Laboratorio de Portswigger sobre GraphQL API