> For the complete documentation index, see [llms.txt](https://beafn28.gitbook.io/beafn28/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://beafn28.gitbook.io/beafn28/web-security/laboratorios-portswigger.md).

# Laboratorios PortSwigger

{% content-ref url="/pages/m0IsVqOmwAOvquymeUEP" %}
[SQL Injection](/beafn28/web-security/laboratorios-portswigger/sql-injection.md)
{% endcontent-ref %}

{% content-ref url="/pages/O9ava1R3zo9990Ib04SZ" %}
[Cross-site scripting](/beafn28/web-security/laboratorios-portswigger/cross-site-scripting.md)
{% endcontent-ref %}

{% content-ref url="/pages/FXdxuFuJVW52cAojynSU" %}
[Cross-site request forgery (CSRF)](/beafn28/web-security/laboratorios-portswigger/cross-site-request-forgery-csrf.md)
{% endcontent-ref %}

{% content-ref url="/pages/i9N1nWelNVMcrcbtccrz" %}
[Clickjacking](/beafn28/web-security/laboratorios-portswigger/clickjacking.md)
{% endcontent-ref %}

{% content-ref url="/pages/uYMkq4wy3REnKdUWpUZC" %}
[DOM-based vulnerabilities](/beafn28/web-security/laboratorios-portswigger/dom-based-vulnerabilities.md)
{% endcontent-ref %}

{% content-ref url="/pages/bzqXmfmTI7LB8LWr7Yad" %}
[Cross-origin resource sharing (CORS)](/beafn28/web-security/laboratorios-portswigger/cross-origin-resource-sharing-cors.md)
{% endcontent-ref %}

{% content-ref url="/pages/9ViU0GX5pCNgdnnUCqmO" %}
[XML external entity (XXE) injection](/beafn28/web-security/laboratorios-portswigger/xml-external-entity-xxe-injection.md)
{% endcontent-ref %}

{% content-ref url="/pages/xdoY1fafr6ouMDO1XyUV" %}
[Server-side request forgery (SSRF)](/beafn28/web-security/laboratorios-portswigger/server-side-request-forgery-ssrf.md)
{% endcontent-ref %}

{% content-ref url="/pages/uUJTzLK8W091NtcGcmht" %}
[HTTP request smuggling](/beafn28/web-security/laboratorios-portswigger/http-request-smuggling.md)
{% endcontent-ref %}

{% content-ref url="/pages/5ynmqPrm34ljCp2TltbX" %}
[OS command injection](/beafn28/web-security/laboratorios-portswigger/os-command-injection.md)
{% endcontent-ref %}

{% content-ref url="/pages/3u9pb1B4Ybe170oE77R0" %}
[Server-side template injection](/beafn28/web-security/laboratorios-portswigger/server-side-template-injection.md)
{% endcontent-ref %}

{% content-ref url="/pages/XAOzLuc3qm7rAwbQVsAk" %}
[Path Traversal](/beafn28/web-security/laboratorios-portswigger/path-traversal.md)
{% endcontent-ref %}

{% content-ref url="/pages/DgNN4blDCd6sCpEgogGO" %}
[Access control](/beafn28/web-security/laboratorios-portswigger/access-control.md)
{% endcontent-ref %}

{% content-ref url="/pages/ZFOrHg3kWMFfEKXO2YVY" %}
[Authentication](/beafn28/web-security/laboratorios-portswigger/authentication.md)
{% endcontent-ref %}

{% content-ref url="/pages/RxPwPJIveULC39a5R75d" %}
[WebSockets](/beafn28/web-security/laboratorios-portswigger/websockets.md)
{% endcontent-ref %}

{% content-ref url="/pages/YwsYk91XXFPB2xMostfM" %}
[Web cache poisoning](/beafn28/web-security/laboratorios-portswigger/web-cache-poisoning.md)
{% endcontent-ref %}

{% content-ref url="/pages/XJ6NBE6YpvsdThNgB6yq" %}
[Insecure deserialization](/beafn28/web-security/laboratorios-portswigger/insecure-deserialization.md)
{% endcontent-ref %}

{% content-ref url="/pages/WpcCtI2II73XD9Ka9bD5" %}
[Information disclosure](/beafn28/web-security/laboratorios-portswigger/information-disclosure.md)
{% endcontent-ref %}

{% content-ref url="/pages/B8jHKwVg0U5r5pnwLfKW" %}
[Business logic vulnerabilities](/beafn28/web-security/laboratorios-portswigger/business-logic-vulnerabilities.md)
{% endcontent-ref %}

{% content-ref url="/pages/A1veYRv8RXungLPdOGQh" %}
[HTTP Host header attacks](/beafn28/web-security/laboratorios-portswigger/http-host-header-attacks.md)
{% endcontent-ref %}

{% content-ref url="/pages/7WF8YfirHq6IscgwsCk1" %}
[OAuth authentication](/beafn28/web-security/laboratorios-portswigger/oauth-authentication.md)
{% endcontent-ref %}

{% content-ref url="/pages/kW1MSmIANWWPtMFz1nT2" %}
[File upload vulnerabilities](/beafn28/web-security/laboratorios-portswigger/file-upload-vulnerabilities.md)
{% endcontent-ref %}

{% content-ref url="/pages/sbP5UibXjd3f4zoJmMkA" %}
[JWT](/beafn28/web-security/laboratorios-portswigger/jwt.md)
{% endcontent-ref %}

{% content-ref url="/pages/XM9gk7JPZv42T9mT5Wp3" %}
[Essential Skills](/beafn28/web-security/laboratorios-portswigger/essential-skills.md)
{% endcontent-ref %}

{% content-ref url="/pages/5kj5Te3hW3DY4LdAjEcv" %}
[Prototype pollution](/beafn28/web-security/laboratorios-portswigger/prototype-pollution.md)
{% endcontent-ref %}

{% content-ref url="/pages/RClxfWk12vM3oMd1YgRB" %}
[GraphQL API vulnerabilities](/beafn28/web-security/laboratorios-portswigger/graphql-api-vulnerabilities.md)
{% endcontent-ref %}

{% content-ref url="/pages/UohcRh6MYcovbizBlv7F" %}
[Race conditions](/beafn28/web-security/laboratorios-portswigger/race-conditions.md)
{% endcontent-ref %}

{% content-ref url="/pages/ZRG4lk1Efsg1EB1WL3JB" %}
[NoSQL injection](/beafn28/web-security/laboratorios-portswigger/nosql-injection.md)
{% endcontent-ref %}

{% content-ref url="/pages/yBOc5tZtaDNmOZyXqPBV" %}
[API testing](/beafn28/web-security/laboratorios-portswigger/api-testing.md)
{% endcontent-ref %}

{% content-ref url="/pages/wLf3A9iLynKtTsO2PEjm" %}
[Web LLM attacks](/beafn28/web-security/laboratorios-portswigger/web-llm-attacks.md)
{% endcontent-ref %}

{% content-ref url="/pages/YQM8NvKKhZqApYwc6WeW" %}
[Web cache deception](/beafn28/web-security/laboratorios-portswigger/web-cache-deception.md)
{% endcontent-ref %}