PortSwigger Uz bosh sahifa

Barcha laboratoriyalar

Sirli laboratoriya sinovi

Nomi va tavsifi yashirilgan tasodifiy laboratoriyani yechib ko‘ring. Zaiflik turi oldindan noma’lum bo‘lgani uchun bu mashq razvedka va tahlil ko‘nikmalaringizni mustahkamlaydi.

Sirli laboratoriyani boshlash

SQL ineksiya

labLab
o'rganuvchiWHERE shartida yashirin ma'lumotlarni olishga imkon beruvchi SQL ineksiya zaifligi.
labLab
o'rganuvchiLoginni aylanib o'tishga imkon beruvchi SQL ineksiya zaifligi.
labLab
o'rganuvchiShartga qarab turli response qaytaradigan Blind SQL ineksiya
labLab
o'rganuvchiXatoga asoslangan ko'rinuvchi SQL ineksiya
labLab
amaliyotchiOracle bo‘lmagan databaselarda jadvallar va ustunlarni aniqlashga qaratilgan SQL ineksiya hujumi
labLab
amaliyotchiOracle ma'lumotlar bazasidagi jadvallar va ustunlarni aniqlash uchun
labLab
amaliyotchiOracle’da database turini va versiyasini aniqlashga qaratilgan SQL ineksiya
labLab
amaliyotchiMySQL va Microsoft’da database turini va versiyasini aniqlashga qaratilgan SQL ineksiya
labLab
amaliyotchiXML encoding orqali filtrni chetlab o‘tadigan SQL ineksiya
labLab
amaliyotchiQuery nechta ustun qaytarayotganini aniqlashga qaratilgan UNION SQL ineksiya hujumi
labLab
amaliyotchiMatn qabul qiladigan ustunni topish uchun UNION SQL ineksiya
labLab
amaliyotchiBoshqa jadvallardagi ma’lumotlarni olishga qaratilgan UNION SQL ineksiya hujumi
labLab
amaliyotchiBitta ustun ichida bir nechta qiymatni olishga qaratilgan UNION SQL ineksiya hujumi
labLab
amaliyotchiShartga bog‘liq xatolar bilan Blind SQL ineksiya
labLab
amaliyotchiVaqt kechikishlari orqali Blind SQL ineksiya
labLab
amaliyotchiVaqt kechikishlari va ma'lumot olish orqali Blind SQL ineksiya
labLab
amaliyotchiOut-of-band aloqa orqali Blind SQL ineksiya
labLab
amaliyotchiOut-of-band ma'lumot eksfiltratsiyasi orqali Blind SQL ineksiya

Cross-site scripting (XSS)

labLab
o'rganuvchiHech narsa kodlanmagan HTML kontekstga reflected XSS
labLab
o'rganuvchiHech narsa kodlanmagan HTML kontekstga stored XSS
labLab
o'rganuvchilocation.search source bilan document.write sinkda DOM XSS
labLab
o'rganuvchilocation.search source bilan innerHTML sinkda DOM XSS
labLab
o'rganuvchilocation.search bilan jQuery href atribut sinkda DOM XSS
labLab
o'rganuvchihashchange hodisasi bilan jQuery selektor sinkda DOM XSS
labLab
o'rganuvchiBurchak qavslar HTML-kodlangan atributga reflected XSS
labLab
o'rganuvchiQo'shtirnoq HTML-kodlangan anchor href atributga stored XSS
labLab
o'rganuvchiBurchak qavslar HTML-kodlangan JS satrga reflected XSS
labLab
amaliyotchiselect element ichida document.write sinkda DOM XSS
labLab
amaliyotchiHTML-kodlangan AngularJS ifodasida DOM XSS
labLab
amaliyotchiReflected DOM XSS
labLab
amaliyotchiStored DOM XSS
labLab
amaliyotchiKo'p teg va atribut bloklangan HTML kontekstga reflected XSS
labLab
amaliyotchiCustom teglardan tashqari barcha teglar bloklangan reflected XSS
labLab
amaliyotchiBa'zi SVG markup'ga ruxsat berilgan reflected XSS
labLab
amaliyotchiCanonical link tegda reflected XSS
labLab
amaliyotchiBitta qo'shtirnoq va backslash escape qilingan JS satrga reflected XSS
labLab
amaliyotchiBurchak qavs/qo'shtirnoq kodlangan, bitta qo'shtirnoq escape qilingan JS satrga XSS
labLab
amaliyotchiKodlangan/escape qilingan onclick eventga stored XSS
labLab
amaliyotchiBarcha belgilar Unicode-escape qilingan template literalga reflected XSS
labLab
amaliyotchiXSS orqali cookie o'g'irlash
labLab
amaliyotchiXSS orqali parol olish
labLab
amaliyotchiXSS orqali CSRF himoyalarini chetlab o'tish
labLab
amaliyotchiJuda qat'iy CSP bilan himoyalangan, dangling markup hujumi bilan reflected XSS
labLab
mutahassisEvent handler va href atributlari bloklangan reflected XSS
labLab
mutahassisBa'zi belgilar bloklangan JavaScript URL'da reflected XSS
labLab
mutahassisSatrlarsiz AngularJS sandbox escape bilan reflected XSS
labLab
mutahassisAngularJS sandbox escape va CSP bilan reflected XSS
labLab
mutahassisCSP bilan himoyalangan, CSP bypass bilan reflected XSS

Cross-site request forgery (CSRF)

labLab
o'rganuvchiHech qanday himoyasiz CSRF
labLab
amaliyotchiToken tekshiruvi so'rov metodiga bog'liq bo'lgan CSRF
labLab
amaliyotchiToken tekshiruvi token mavjudligiga bog‘liq bo‘lgan CSRF
labLab
amaliyotchiToken foydalanuvchi sessiyasiga bog‘lanmagan CSRF
labLab
amaliyotchiToken sessiyaga tegishli bo‘lmagan cookie’ga bog‘langan CSRF
labLab
amaliyotchiToken cookie’da takrorlangan CSRF
labLab
amaliyotchiMethod override orqali SameSite Lax’ni chetlab o‘tish
labLab
amaliyotchiClient-side redirect orqali SameSite Strict’ni chetlab o‘tish
labLab
amaliyotchiSibling domen orqali SameSite Strict’ni chetlab o‘tish
labLab
amaliyotchiCookie refresh orqali SameSite Lax’ni chetlab o‘tish
labLab
amaliyotchiReferer tekshiruvi sarlavha mavjudligiga bog‘liq bo‘lgan CSRF
labLab
amaliyotchiBuzuq Referer tekshiruvi bilan CSRF

Clickjacking

DOMga asoslangan zaifliklar

Cross origin resource sharing (CORS)

XXE ineksiyasi

Server-Side request forgery (SSRF)

HTTP request smuggling

labLab
amaliyotchiHTTP request smuggling, asosiy CL.TE zaifligi
labLab
amaliyotchiHTTP request smuggling, asosiy TE.CL zaifligi
labLab
amaliyotchiHTTP request smuggling, TE header'ini obfuskatsiya qilish
labLab
amaliyotchiHTTP request smuggling, CL.TE zaifligini differensial javob bilan tasdiqlash
labLab
amaliyotchiHTTP request smuggling, TE.CL zaifligini differensial javob bilan tasdiqlash
labLab
amaliyotchiFront-end nazoratini chetlab o'tish uchun HTTP request smuggling, CL.TE
labLab
amaliyotchiFront-end nazoratini chetlab o'tish uchun HTTP request smuggling, TE.CL
labLab
amaliyotchiFront-end so'rov qayta yozishini oshkor qilish uchun HTTP request smuggling
labLab
amaliyotchiBoshqa foydalanuvchilar so'rovlarini qo'lga olish uchun HTTP request smuggling
labLab
amaliyotchiReflected XSS yetkazish uchun HTTP request smuggling
labLab
amaliyotchiH2.CL request smuggling
labLab
amaliyotchiCRLF inyeksiya orqali HTTP/2 request smuggling
labLab
amaliyotchiCRLF inyeksiya orqali HTTP/2 request splitting
labLab
mutahassisWeb cache poisoning bajarish uchun HTTP request smuggling
labLab
mutahassisWeb cache deception bajarish uchun HTTP request smuggling
labLab
mutahassisTE request smuggling orqali HTTP/2 response queue poisoning
labLab
mutahassisHTTP/2 request tunnelling orqali access control'ni chetlab o'tish
labLab
mutahassisHTTP/2 request tunnelling orqali web cache poisoning
labLab
mutahassis0.CL request smuggling
labLab
mutahassisCL.0 request smuggling
labLab
mutahassisClient-side desync
labLab
mutahassisServer-side pauza asosidagi request smuggling

Buyruq ineksiyasi

Server-side template injection (SSTI)

Path traversal

Access control

labLab
o'rganuvchiHimoyalanmagan admin funksiyasi
labLab
o'rganuvchiOldindan aytib bo'lmaydigan URL bilan himoyalanmagan admin funksiyasi
labLab
o'rganuvchiSo'rov parametri orqali boshqariladigan foydalanuvchi roli
labLab
o'rganuvchiFoydalanuvchi profilida o'zgartirilishi mumkin bo'lgan rol
labLab
o'rganuvchiSo'rov parametri orqali boshqariladigan foydalanuvchi ID
labLab
o'rganuvchiOldindan aytib bo'lmaydigan foydalanuvchi ID'lari bilan
labLab
o'rganuvchiRedirect'da ma'lumot sizishi bilan foydalanuvchi ID
labLab
o'rganuvchiParol oshkorligi bilan foydalanuvchi ID
labLab
o'rganuvchiInsecure direct object references (IDOR)
labLab
amaliyotchiURL asosidagi access control'ni chetlab o'tish mumkin
labLab
amaliyotchiMetod asosidagi access control'ni chetlab o'tish mumkin
labLab
amaliyotchiBir qadamda access control yo'q ko'p bosqichli jarayon
labLab
amaliyotchiReferer asosidagi access control

Autentifikatsiya

labLab
o'rganuvchiTurli response'lar orqali username aniqlash
labLab
o'rganuvchi2FA'ni oddiy chetlab o'tish
labLab
o'rganuvchiParolni tiklashning buzuq mantig'i
labLab
amaliyotchiOzgina farq qiluvchi response'lar orqali username aniqlash
labLab
amaliyotchiResponse vaqti orqali username aniqlash
labLab
amaliyotchiBuzuq brute-force himoyasi, IP bloklash
labLab
amaliyotchiHisob qulflanishi orqali username aniqlash
labLab
amaliyotchi2FA buzuq mantiqi
labLab
amaliyotchiStay-logged-in cookie'ni brute-force qilish
labLab
amaliyotchiOflayn parol buzish (offline password cracking)
labLab
amaliyotchiMiddleware orqali parol tiklashni zaharlash (poisoning)
labLab
amaliyotchiParolni o'zgartirish orqali parolni brute-force qilish
labLab
mutahassisBuzuq brute-force himoyasi, bitta so'rovda bir nechta parol
labLab
mutahassisBrute-force hujumi orqali 2FA'ni chetlab o'tish

WebSocketlar

Web cache poisoning

labLab
amaliyotchiKalitsiz header bilan web cache poisoning
labLab
amaliyotchiKalitsiz cookie bilan web cache poisoning
labLab
amaliyotchiBir nechta header bilan web cache poisoning
labLab
amaliyotchiNoma'lum header yordamida nishonli web cache poisoning
labLab
amaliyotchiKalitsiz query string orqali web cache poisoning
labLab
amaliyotchiKalitsiz query parametri orqali web cache poisoning
labLab
amaliyotchiParameter cloaking
labLab
amaliyotchiFat GET so'rovi orqali web cache poisoning
labLab
amaliyotchiURL normalizatsiyasi
labLab
mutahassisQat'iy keshlash mezonli kesh orqali DOM zaifligini ekspluatatsiya qilish
labLab
mutahassisWeb cache poisoning zaifliklarini birlashtirish
labLab
mutahassisCache key injection
labLab
mutahassisInternal cache poisoning

Insecure deserialization

Ma'lumotlarni oshkor qilish

Biznes logikasidagi zaiflik

labLab
o'rganuvchiClient-side nazoratlarga haddan tashqari ishonish
labLab
o'rganuvchiHigh-level logic zaifligi
labLab
o'rganuvchiNomuvofiq xavfsizlik nazoratlari
labLab
o'rganuvchiParolni tiklashning buzuq mantig'i
labLab
o'rganuvchi2FA'ni oddiy chetlab o'tish
labLab
o'rganuvchiBiznes qoidalarining buzuq ta'minlanishi
labLab
amaliyotchi2FA buzuq mantiqi
labLab
amaliyotchiLow-level logic flaw
labLab
amaliyotchiIstisno kiritmaning nomuvofiq boshqarilishi
labLab
amaliyotchiIkki maqsadli endpointda zaif izolyatsiya
labLab
amaliyotchiIsh oqimining yetarli tekshirilmasligi
labLab
amaliyotchiBuzuq holat mashinasi (state machine) orqali autentifikatsiyani chetlab o'tish
labLab
amaliyotchiCheksiz pul (infinite money) logic flaw
labLab
amaliyotchiEncryption oracle orqali autentifikatsiyani chetlab o'tish
labLab
mutahassisEmail manzil tahlili nomuvofiqliklari orqali access control'ni chetlab o'tish

HTTP Host header hujumlari

OAuth autentifikatsiya

Fayl yuklash zaifligi

JWT xujumlar

Essential skills

Prototype pollution

labLab
amaliyotchiClient-side prototype pollution orqali DOM XSS
labLab
amaliyotchiMuqobil prototype pollution vektori orqali DOM XSS
labLab
amaliyotchiNuqsonli sanitizatsiya orqali client-side prototype pollution
labLab
amaliyotchiUchinchi tomon kutubxonalaridagi client-side prototype pollution
labLab
amaliyotchiBrauzer API'lari orqali client-side prototype pollution
labLab
amaliyotchiServer-side prototype pollution orqali imtiyoz oshirish
labLab
amaliyotchiAks etgan xususiyatsiz server-side prototype pollutionni aniqlash
labLab
amaliyotchiServer-side prototype pollution uchun nuqsonli kirish filtrlarini chetlab o'tish
labLab
amaliyotchiServer-side prototype pollution orqali masofaviy kod ijrosi
labLab
mutahassisServer-side prototype pollution orqali maxfiy ma'lumotni eksfiltratsiya qilish

GraphQL API zaifliklari

Parallel bajarishdagi xatolik

labLab
o'rganuvchiLimit overrun race condition
labLab
amaliyotchiRace condition orqali rate limit'larni chetlab o'tish
labLab
amaliyotchiMulti-endpoint race condition
labLab
amaliyotchiSingle-endpoint race condition
labLab
amaliyotchiVaqtga sezgir zaifliklardan foydalanish
labLab
mutahassisPartial construction race condition

NoSQL ineksiya

API sinovi

Web LLM hujumlari

Web cache deception

O‘quv jarayoningizni kuzatish uchun bepul ro‘yxatdan o‘ting

  • Haqiqiy nishonlarda zaifliklardan foydalanishni mashq qiling.
  • Boshlang‘ichdan mutaxassis darajasigacha bo‘lgan o‘sishingizni saqlang.
  • Faxriylar doskasidagi o‘rningizni kuzatib boring.
Ro‘yxatdan o‘tish

Hisobingiz bormi? Kirish