Web Security Notes

This repository contains my notes and practice from PortSwigger Web Security Academy and Python learning.

Progress

Completed

• SQL Injection (PortSwigger)
• Server-side vulnerabilities (PortSwigger)

In Progress

• API Testing
• File Upload Vulnerabilities
• XSS

---

SQL Injection

• Basic techniques
• Bypass filters
• Extracting data

Server-Side Vulnerabilities

• SSRF
• File upload vulnerabilities
• Other server-side issues

API Testing

• In progress

XSS

• Refelcted XSS

Completed Labs (PortSwigger)

• Reflected XSS into HTML context (no encoding)

---

Python (for automation)

• Basics: variables, strings, lists
• Working with data
• (later) scripts for security testing

---

Goals

• Understand how vulnerabilities work
• Learn how to exploit and prevent them
• Build small security tools using Python