$ grep -r lessons ./labs
Security notes
What I'm learning, written down. These come from labs and practice environments, not from real-world targets or bug bounty programs.
SQL Injection: Login Bypass on VulnApp
MediumExploiting a classic SQL injection vulnerability in a login form to bypass authentication and gain admin access on a deliberately vulnerable web application.
#WebLinux Privilege Escalation via Misconfigured SUID Binary
HardEscalating from a low-privilege shell to root by exploiting a custom SUID binary that invokes system commands without absolute paths, enabling PATH hijacking.
#Privilege EscalationNetwork Enumeration and Service Discovery
EasyPerforming comprehensive network reconnaissance against a target machine to identify open ports, running services, and potential attack vectors through systematic enumeration.
#NetworkExploiting Server-Side Parameter Pollution in a REST URL
HardPlatform: PortSwigger Web Security Academy Difficulty: Expert Category: Server-Side Parameter Pollution / REST API Security Primary Tool: Burp Suite Environment: PortSwigger Web Security Academy Lab
#Web