PentesterLab

Structured web vulnerability labs and challenges

📋

PentesterLab

Hands-on labs focused entirely on web application security, ranging from standard SQL injections to complex OAuth, JWT, and serialization flaws.

Level: Pro 50+ Labs Completed Web Security Specialization

---

Lab Exercises

🌐

JWT: Weak HMAC Secret

Web Hacking

Weak symmetric secret cracking via jwtcat · payload alteration → admin access

EasyWriteup →

🌐

OAuth: Redirect URI Hijack

Web Hacking

Manipulating redirect_uri parameter · token theft via open redirector · account takeover

MediumWriteup →

🌐

Node.js Serialization

Web Hacking

Unserialize() vulnerability in Node.js · custom IIFE payload generation · RCE

HardWriteup →

---