An event focused on web security. Every week, we work our way through the PortSwigger Academy topics list and (try to) solve a few labs! The event currently only happens in person and mostly in German, but we will accommodate any requests for English.
If you want to reach out, have ideas for topics or questions around the event, feel free ping cyaniccerulean
.
Here's a list of all the events giving you a brief idea on what we're doing:
| Has description | |
|---|---|
| Web-foo/2023-02-22 | Clickjacking |
| Web-foo/2023-02-15 | File Upload Vulnerabilities |
| Web-foo/2023-02-08 | Information Disclosure Vulnerabilities |
| Web-foo/2023-02-01 | HTTP Host Header Attacks |
| Web-foo/2023-01-25 | Insecure Deserialization |
| Web-foo/2023-01-18 | Insecure Deserialization |
| Web-foo/2023-01-11 | Web Cache Poisoning |
| Web-foo/2023-01-04 | Web Sockets |
| Web-foo/2022-12-21 | Business logic vulnerabilities |
| Web-foo/2022-12-14 | Authentication Vulnerabilities |
| Web-foo/2022-12-07 | Authentication Vulnerabilities |
| Web-foo/2022-11-30 | Authentication Vulnerabilities |
| Web-foo/2022-11-23 | Authentication Vulnerabilities |
| Web-foo/2022-11-16 | Authentication vulnerabilities |
| Web-foo/2022-11-09 | Access control vulnerabilities |
| Web-foo/2022-11-02 | Directory Traversal |
| Web-foo/2022-10-26 | Server Side Template Injection |
| Web-foo/2022-10-19 | OS injection |
| Web-foo/2022-10-12 | HTTP request smuggling |
| Web-foo/2022-10-05 | SSRF |
| Web-foo/2022-09-28 | XXE |
| Web-foo/2022-09-21 | CORS |
| Web-foo/2022-09-14 | DOM based vulnerabilities |
| Web-foo/2022-09-07 | CSRF |
| Web-foo/2022-08-31 | XSS |
| Web-foo/2022-08-24 | SQLi |
| Web-foo/2022-08-18 | Web Basics |
other topics[edit | edit source]
- JWT
- GraphQL
- Prototype Pollution
- https://www.hackthebox.com/
(add topics at the bottom of the list)