> For the complete documentation index, see [llms.txt](https://ahmed-tarek.gitbook.io/security-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs.md).

# Portswigger Labs

- [XSS](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/xss.md)
- [DOM XSS](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/dom-xss.md)
- [SQL Injection](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/sql-injection.md)
- [Access Control](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/access-control.md)
- [Authentication Bypass](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/authentication-bypass.md)
- [Business Logic](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/business-logic.md)
- [Information Disclosure](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/information-disclosure.md)
- [File Upload Vulnerabilities](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/file-upload-vulnerabilities.md)
- [Deserialization](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/deserialization.md)
- [Prototype Pollution](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/prototype-pollution.md)
- [API Testing](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/api-testing.md)
- [SSTI](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/ssti.md)
- [JSON Web Tokens  ( JWT )](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/json-web-tokens-jwt.md)
- [SSRF](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/ssrf.md)
- [CSRF](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/csrf.md)
- [Cross-Origin Resource Sharing](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/cross-origin-resource-sharing.md)
- [Command Injection](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/command-injection.md)
- [XXE](https://ahmed-tarek.gitbook.io/security-notes/portswigger-labs/xxe.md)