Web Application Security, Testing, & Scanning - PortSwigger
Attack surface visibility Improve security posture, prioritize manual testing, free up time. CI-driven scanning More proactive security - find and fix vulnerabilities earlier. Application security testing See how our software enables the world to secure the web. DevSecOps Catch critical bugs; ship more secure software, more quickly. Penetration testing Accelerate penetration testing - find ...
Web Security Academy: Free Online Training from PortSwigger
Up-to-the-minute learning resources. The Web Security Academy is a free online training center for web application security. It includes content from PortSwigger's in-house research team, experienced academics, and our Chief Swig Dafydd Stuttard - author of The Web Application Hacker's Handbook.. Unlike a textbook, the Academy is constantly updated.
Burp Suite Professional - PortSwigger
Burp Suite Enterprise Edition The enterprise-enabled dynamic web vulnerability scanner. Burp Suite Professional The world's #1 web penetration testing toolkit. Burp Suite Community Edition The best manual tools to start web security testing. Dastardly, from Burp Suite Free, lightweight web application security scanning for CI/CD. View all product editions
What is SQL Injection? Tutorial & Examples - PortSwigger
SQL injection (SQLi) is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to its database. This can allow an attacker to view data that they are not normally able to retrieve. This might include data that belongs to other users, or any other data that the application can access.
CORS and the Access-Control-Allow-Origin response header
The cross-origin resource sharing (CORS) specification prescribes header content exchanged between web servers and browsers that restricts origins for web resource requests outside of the origin domain. The CORS specification identifies a collection of protocol headers of which Access-Control-Allow-Origin is the most significant.
Installing Burp Suite Professional / Community Edition
2024年8月30日 · Burp Suite Enterprise Edition The enterprise-enabled dynamic web vulnerability scanner. Burp Suite Professional The world's #1 web penetration testing toolkit. Burp Suite Community Edition The best manual tools to start web security testing. Dastardly, from Burp Suite Free, lightweight web application security scanning for CI/CD. View all product editions
Getting started with Burp Suite - PortSwigger
2024年8月30日 · Burp Suite is a comprehensive suite of tools for web application security testing. This interactive tutorial is designed to get you started with the core features of Burp Suite as quickly as possible. It uses deliberately vulnerable labs from the Web Security Academy to give you practical experience of how Burp Suite works.
SQL injection cheat sheet | Web Security Academy - PortSwigger
Attack surface visibility Improve security posture, prioritize manual testing, free up time. CI-driven scanning More proactive security - find and fix vulnerabilities earlier. Application security testing See how our software enables the world to secure the web. DevSecOps Catch critical bugs; ship more secure software, more quickly. Penetration testing Accelerate penetration testing - find ...
What is cross-site scripting (XSS)? - PortSwigger
Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users have with a vulnerable application. It allows an attacker to circumvent the same origin policy, which is designed to segregate different websites from each other. Cross-site scripting vulnerabilities ...
Burp Suite - Application Security Testing Software - PortSwigger
Burp Suite Enterprise Edition The enterprise-enabled dynamic web vulnerability scanner. Burp Suite Professional The world's #1 web penetration testing toolkit. Burp Suite Community Edition The best manual tools to start web security testing. Dastardly, from Burp Suite Free, lightweight web application security scanning for CI/CD. View all product editions