blog.maryniewski.pl | blog.maryniewski.pl

Skip to content

blog.maryniewski.pl

Main NavigationHome Page Privacy Policy

Appearance

Sidebar Navigation

Home Page

Hello there

Basics

Bug Reporting Process

Levels and Types of Testing

The Role of Software Testers at Different Competency Levels.

Rules of Effective Testing

Software Testing Techniques part 1

What do Software Testers Get Paid For?

Ways to Gain an Experience as a Beginner Tester

Websecurity

HTTP Headers

PortSwigger Academy

Authentication (labs)

User role controlled by request parameter

Username enumeration via different responses (to be continued...)

User role can be modified in user profile

User ID controlled by request parameter with unpredictable user IDs

User ID controlled by request parameter

Broken Access Control (labs)

User ID Controlled by Request Parameter with Data Leakage in Redirect

User ID Controlled by Request Parameter with Password Disclosure (ENG | PL)

Insecure Direct Object References (ENG | PL)

OS Command Injection (labs)

Blind OS command injection with output redirection (ENG | PL)

Blind OS command injection with time delays (ENG | PL)

File Upload Vulnerabilities (labs)

Web Shell Upload via Content-Type Restriction Bypass (ENG | PL)

Web Shell Upload via Path Traversal (ENG | PL)

Reconnaissance (labs)

Unprotected admin functionality

Unprotected admin functionality with unpredictable URL

On this page

Table of Contents for current page

Documenting my journey.

Topics covered:

Cybersecurity
Life simplifying automations

Where can you find me?

LinkedIn
Twitter
email

Next pageHello there

Topics covered: ​

Where can you find me? ​

Topics covered:

Where can you find me?