Portswigger Web Security Academy Writeup

Portswigger's Web Academy solutions writeup for your reference to learn manual Web Application Penetration Testing

Checklists

• Server-side Vulnerabilities
• Path Traversal
• API Pentest
• SSRF
• CSRF
• File Upload Vulnerabilities
• Clickjacking
• Web Cache Deception
• Prototype Pollution
• SQL Injection
• CORS Vulnerabilities
• Race Conditions

Source

https://portswigger.net/web-security