# PortSwigger Labs by Desdes

## PortSwigger Labs by Desdes

- [Bienvenid@!](https://ps.desdes.xyz/bienvenid.md)
- [WebSockets](https://ps.desdes.xyz/websockets.md)
- [Lab: Manipulating WebSocket messages to exploit vulnerabilities](https://ps.desdes.xyz/websockets/lab-manipulating-websocket-messages-to-exploit-vulnerabilities.md)
- [Lab: Manipulating the WebSocket handshake to exploit vulnerabilities](https://ps.desdes.xyz/websockets/lab-manipulating-the-websocket-handshake-to-exploit-vulnerabilities.md)
- [Lab: Cross-site WebSocket hijacking](https://ps.desdes.xyz/websockets/lab-cross-site-websocket-hijacking.md)
- [Insecure deserialization](https://ps.desdes.xyz/insecure-deserialization.md)
- [Lab: Modifying serialized objects](https://ps.desdes.xyz/insecure-deserialization/lab-modifying-serialized-objects.md)
- [Lab: Modifying serialized data types](https://ps.desdes.xyz/insecure-deserialization/lab-modifying-serialized-data-types.md)
- [Lab: Using application functionality to exploit insecure deserialization](https://ps.desdes.xyz/insecure-deserialization/lab-using-application-functionality-to-exploit-insecure-deserialization.md)
- [Lab: Arbitrary object injection in PHP](https://ps.desdes.xyz/insecure-deserialization/lab-arbitrary-object-injection-in-php.md)
- [Lab: Exploiting Java deserialization with Apache Commons](https://ps.desdes.xyz/insecure-deserialization/lab-exploiting-java-deserialization-with-apache-commons.md)
- [Lab: Exploiting PHP deserialization with a pre-built gadget chain](https://ps.desdes.xyz/insecure-deserialization/lab-exploiting-php-deserialization-with-a-pre-built-gadget-chain.md)
- [Lab: Exploiting Ruby deserialization using a documented gadget chain](https://ps.desdes.xyz/insecure-deserialization/lab-exploiting-ruby-deserialization-using-a-documented-gadget-chain.md)
- [Lab: Developing a custom gadget chain for Java deserialization](https://ps.desdes.xyz/insecure-deserialization/lab-developing-a-custom-gadget-chain-for-java-deserialization.md)
- [Lab: Developing a custom gadget chain for PHP deserialization](https://ps.desdes.xyz/insecure-deserialization/lab-developing-a-custom-gadget-chain-for-php-deserialization.md)
- [Lab: Using PHAR deserialization to deploy a custom gadget chain](https://ps.desdes.xyz/insecure-deserialization/lab-using-phar-deserialization-to-deploy-a-custom-gadget-chain.md)
- [GraphQL API vulnerabilities](https://ps.desdes.xyz/graphql-api-vulnerabilities.md)
- [Server-side template injection](https://ps.desdes.xyz/server-side-template-injection.md)
- [Lab: Basic server side template injection](https://ps.desdes.xyz/server-side-template-injection/lab-basic-server-side-template-injection.md)
- [Lab: Basic server side template injection (code context)](https://ps.desdes.xyz/server-side-template-injection/lab-basic-server-side-template-injection-code-context.md)
- [Lab: Server side template injection using documentation](https://ps.desdes.xyz/server-side-template-injection/lab-server-side-template-injection-using-documentation.md)
- [Lab: Server side template injection in an unknown language with a documented exploit](https://ps.desdes.xyz/server-side-template-injection/lab-server-side-template-injection-in-an-unknown-language-with-a-documented-exploit.md)
- [Lab: Server side template injection with information disclosure via user supplied objects](https://ps.desdes.xyz/server-side-template-injection/lab-server-side-template-injection-with-information-disclosure-via-user-supplied-objects.md)
- [Lab: Server side template injection in a sandboxed environment](https://ps.desdes.xyz/server-side-template-injection/lab-server-side-template-injection-in-a-sandboxed-environment.md)
- [Lab: Server side template injection with a custom exploit](https://ps.desdes.xyz/server-side-template-injection/lab-server-side-template-injection-with-a-custom-exploit.md)
- [Web cache poisoning](https://ps.desdes.xyz/web-cache-poisoning.md)
- [HTTP Host header attacks](https://ps.desdes.xyz/http-host-header-attacks.md)
- [HTTP request smuggling](https://ps.desdes.xyz/http-request-smuggling.md)
- [OAuth authentication](https://ps.desdes.xyz/oauth-authentication.md)
- [JWT attacks](https://ps.desdes.xyz/jwt-attacks.md)
- [Prototype pollution](https://ps.desdes.xyz/prototype-pollution.md)
- [Essential skills](https://ps.desdes.xyz/essential-skills.md)