CSRF where token is not tied to user session
Laboratorio de Portswigger sobre CSRF
Justice-Reaper
CSRF where token validation depends on token being present
Laboratorio de Portswigger sobre CSRF
CSRF where token validation depends on request method
Laboratorio de Portswigger sobre CSRF
CSRF vulnerability with no defenses
Laboratorio de Portswigger sobre CSRF
Exploiting NoSQL operator injection to extract unknown fields
Laboratorio de Portswigger sobre NoSQLI
Exploiting NoSQL injection to extract data
Laboratorio de Portswigger sobre NoSQLI
Exploiting NoSQL operator injection to bypass authentication
Laboratorio de Portswigger sobre NoSQLI
Detecting NoSQL injection
Laboratorio de Portswigger sobre NoSQLI
Bypassing GraphQL brute force protections
Laboratorio de Portswigger sobre GraphQL API Vulnerabilities
Finding a hidden GraphQL endpoint
Laboratorio de Portswigger sobre GraphQL API Vulnerabilities