Web-foo

An event focused on web security. Every week, we work our way through the PortSwigger Academy topics list and (try to) solve a few labs! The event currently only happens in person and mostly in German, but we will accommodate any requests for English.

If you want to reach out, have ideas for topics or questions around the event, feel free ping cyaniccerulean.

Here's a list of all the events giving you a brief idea on what we're doing:

	Has description
Web-foo/2022-08-18	Web Basics
Web-foo/2022-08-24	SQLi
Web-foo/2022-08-31	XSS
Web-foo/2022-09-07	CSRF
Web-foo/2022-09-14	DOM based vulnerabilities
Web-foo/2022-09-21	CORS
Web-foo/2022-09-28	XXE
Web-foo/2022-10-05	SSRF
Web-foo/2022-10-12	HTTP request smuggling
Web-foo/2022-10-19	OS injection
Web-foo/2022-10-26	Server Side Template Injection
Web-foo/2022-11-02	Directory Traversal
Web-foo/2022-11-09	Access control vulnerabilities
Web-foo/2022-11-16	Authentication vulnerabilities
Web-foo/2022-11-23	Authentication Vulnerabilities
Web-foo/2022-11-30	Authentication Vulnerabilities
Web-foo/2022-12-07	Authentication Vulnerabilities
Web-foo/2022-12-14	Authentication Vulnerabilities
Web-foo/2022-12-21	Business logic vulnerabilities
Web-foo/2023-01-04	Web Sockets
Web-foo/2023-01-11	Web Cache Poisoning
Web-foo/2023-01-18	Insecure Deserialization
Web-foo/2023-01-25	Insecure Deserialization
Web-foo/2023-02-01	HTTP Host Header Attacks
Web-foo/2023-02-08	Information Disclosure Vulnerabilities
Web-foo/2023-02-15	File Upload Vulnerabilities
Web-foo/2023-02-22	Clickjacking

other topics

• JWT
• GraphQL
• Prototype Pollution
• https://www.hackthebox.com/

(add topics at the bottom of the list)