PortSwigger
PortSwigger Web Security Academy
Free web-security explanations and deliberately vulnerable labs for practicing how application flaws are found, understood, and tested.
Intermediate10+ hours
Web Security courses and tutorials
Explore free web-security labs and learning resources for HTTP, application weaknesses, and mitigations, with guidance on authorized practical study.
1 learning resource in this collection
About Web Security
Web security builds on understanding how browsers and servers exchange information. A lab lets you examine a specific weakness in a controlled setting and connect an unexpected result with the application behavior that caused it.
Choose a useful starting point
PortSwigger's academy provides structured material and practice labs. Learn HTTP requests, sessions, and basic application data flow first. Stay within authorized environments and read the explanation of a vulnerability before treating a successful technique as full understanding.
Build on the lessons
Write a short lab note covering the weakness, reproduction, evidence, and mitigation. Try to explain why a modified request works and when the same approach would fail.