Yulia PopovLog Operations — TryHackMeIn this lab, you will learn the configuration approaches required to manage and analyse logs in an operational context3d ago3d ago
Yulia PopovIntro to Logs — TryHackMeThis lab covers how logs can be used to record an adversary’s actions, the tools and techniques needed to perform log analysis, and the…3d ago3d ago
Yulia PopovCSRF where token is not tied to user session — PortSwiggerThis lab’s email change functionality is vulnerable to CSRF.Jul 31Jul 31
Yulia PopovCSRF where token validation depends on token being present — PostSwiggerThis lab’s email change functionality is vulnerable to CSRF.Jul 25Jul 25
Yulia PopovCSRF where token validation depends on request method — PortSwiggerThis lab’s email change functionality is vulnerable to CSRF.Jul 25Jul 25
Yulia PopovCSRF vulnerability with no defenses — PortSwiggerThis lab’s email change functionality is vulnerable to CSRF.Jul 21Jul 21
Yulia PopovRemote code execution via web shell upload — PortSwiggerThis lab contains a vulnerable image upload function. It doesn’t perform any validation on the files users upload before storing them on…Jul 20Jul 20
Yulia PopovSSRF with whitelist-based input filter — PortSwiggerThis lab has a stock check feature which fetches data from an internal system.Jul 18Jul 18
Yulia PopovSSRF with blacklist-based input filter — PortSwiggerThis lab has a stock check feature which fetches data from an internal system.Jul 17Jul 17
Yulia PopovSQL injection attack, querying the database type and version on MySQL and Microsoft — PortSwiggerThis lab contains a SQL injection vulnerability in the product category filter. You can use a UNION attack to retrieve the results from an…Jul 17Jul 17