Learn Web Security With PortSwigger

Hey guys ✌🏻, I share my self-study journey in Web Security here, hoping these notes provide something useful for both newcomers and experienced folks.

Summary

In my third year studying Information Security, I realized that what we learn in class is just the basics. To become a real hacker 👌🏻, self-study and practice are essential.

Feeling unsure and confused, I decided to dive into PortSwigger Labs—the only platform I knew at the time for learning Web Security properly.

PortSwigger is a very comprehensive platform for Web Security, with the highlight being PortSwigger Academy—a huge collection of labs where you can practice from basic to advanced levels. I spent over a month working through these labs, which was tough but very rewarding.

Labs I Completed

• SQL Injection Attack

• File Upload Vulnerability Exploit

• OAuth 2.0 Authentication Attack

• XSS Attack

Hmmm...

Honestly, I'm pretty lazy. Writing these notes helps me remember and serves as a little diary of my self-study journey in Web Security. If you're also searching for direction, don't hesitate to start with the small steps.l things. Let’s Go!