Popo Hack

3.03K subscribers

54 videos

Hi, I’m Nabil Popo 🧑‍💻 Cybersecurity Researcher and Bug Bounty Hunter This channel helps you get into cybersecurity and become a skilled hacker. I share: ✅ Q...

Latest Videos

PortSwigger - HTTP Host Header Attacks - Lab #2 Host header authentication bypass

PortSwigger - HTTP Host Header Attacks - Lab #1 Basic password reset poisoning

Portswigger - File upload - Lab #2 Web shell upload via Content Type restriction bypass

Portswigger - File upload - Lab #1 Remote code execution via web shell upload

Portswigger - Access Control - Lab #13 Referer based access control

Portswigger - Access Control - Lab #12 Multi step process with no access control on one step

Portswigger - Access Control - Lab #11 Method based access control can be circumvented

Portswigger - Access Control - Lab #10 URL based access control can be circumvented

Portswigger - Access Control - Lab #9 Insecure direct object references (IDOR)

Portswigger - Access Control - Lab #8 User ID controlled request parameter with password disclosure

Portswigger - Access Control - Lab #7 User ID controlled by req params with data leakage in redirect

Portswigger - Access Control - Lab #6 User ID controlled by request parameter with unpredictable use

Portswigger - XSS - Lab #3 DOM XSS in document write sink using source location search

Portswigger - XSS - Lab #2 Stored XSS into HTML context with nothing encoded

Portswigger - XSS - Lab #1 Reflected XSS into HTML context with nothing encoded

Portswigger - Access Control - Lab #5 User ID controlled by request parameter

Portswigger - Information Disclosure - Lab #5 Information disclosure in version control history

Portswigger - Access Control - Lab #4 User role can be modified in user profile

Portswigger - Access Control - Lab #3 User role controlled by request parameter

Portswigger - Access Control - Lab #2 Unprotected admin functionality with unpredictable URL

Portswigger - Access Control - Lab #1 Unprotected admin functionality

Portswigger - Business Logic - Lab #2 High level logic vulnerability

Portswigger - Business Logic - Lab #1 Excessive trust in client side controls

Portswigger - Information Disclosure - Lab #4 Authentication bypass via information disclosure

Portswigger - Information Disclosure - Lab #3 Source code disclosure via backup files

Portswigger - Information Disclosure - Lab #2 Information disclosure on debug page

Portswigger - Information Disclosure - Lab #1 Information disclosure in error messages

Portswigger - API Testing - Lab #5 Exploiting server side parameter pollution in a REST URL

Portswigger - API Testing - Lab #4 Exploiting a mass assignment vulnerability

Portswigger - API Testing - Lab #3 Finding and exploiting an unused API endpoint