DOM XSS – document.write Sink Using location.search Inside a select Element
A DOM XSS lab focused on breaking out of a restrictive select and option context.
- DOM XSS
- XSS
- PortSwigger
Writing
Notes & write-ups
Technical write-ups from hands-on security labs, backend exploration and the concepts I am currently learning.
Stored DOM XSS – Weak escapeHTML() Bypass
A stored DOM XSS lab focused on tracing stored input and bypassing incomplete HTML escaping.
- DOM XSS
- XSS
- PortSwigger
SQL Injection Attack – Listing Database Contents (Oracle)
A UNION-based SQL injection lab covering database enumeration on Oracle.
- SQL Injection
- PortSwigger
- Oracle
SQL Injection – Querying the Database Type and Version
A practical SQL injection lab about identifying a backend database and retrieving its version.
- SQL Injection
- PortSwigger
- MySQL
SQL Injection – Listing Database Contents on Non-Oracle Databases
A database-enumeration lab using information-schema tables on a non-Oracle database.
- SQL Injection
- PortSwigger