🔐 Security Writeups

🇧🇷 Português · 🇺🇸 English

---

🇧🇷 Português

Documentação dos meus estudos e labs práticos em segurança ofensiva, com foco em pentest e aplicações web.

Estrutura

security-writeups/
└── web-security/
    └── portswigger/
        ├── access-control/
        └── sql-injection/

📊 Progresso por Categoria

Categoria	Progresso	Apprentice	Practitioner	Total
Access Control & IDOR	██████████ 100%	9 ✅	4 ✅	13
SQL Injection	██████████ 100%	2 ✅	14 ✅	16
XSS	░░░░░░░░░░ 0%	—	—	em breve

Writeups — Access Control & IDOR

#	Lab	Dificuldade	Status
01	Unprotected Admin Functionality	🟢 Apprentice	✅
02	Unprotected Admin with Unpredictable URL	🟢 Apprentice	✅
03	User Role Controlled by Request Parameter	🟢 Apprentice	✅
04	User Role Modified in User Profile	🟢 Apprentice	✅
05	URL-Based Access Control Bypass	🟡 Practitioner	✅
06	Method-Based Access Control Bypass	🟡 Practitioner	✅
07	User ID Controlled by Request Parameter	🟢 Apprentice	✅
08	User ID with Unpredictable GUIDs	🟢 Apprentice	✅
09	User ID with Data Leakage in Redirect	🟢 Apprentice	✅
10	User ID with Password Disclosure	🟢 Apprentice	✅
11	Insecure Direct Object References (IDOR)	🟢 Apprentice	✅
12	Multi-Step Process with No Access Control	🟡 Practitioner	✅
13	Referer-Based Access Control	🟡 Practitioner	✅

Writeups — SQL Injection

#	Lab	Dificuldade	Status
01	WHERE Clause — Retrieving Hidden Data	🟢 Apprentice	✅
02	Login Bypass	🟢 Apprentice	✅
03	UNION — Database Version (Oracle)	🟡 Practitioner	✅
04	UNION — Database Version (MySQL/Microsoft)	🟡 Practitioner	✅
05	UNION — Listing Contents (Non-Oracle)	🟡 Practitioner	✅
06	UNION — Listing Contents (Oracle)	🟡 Practitioner	✅
07	UNION — Determining Number of Columns	🟡 Practitioner	✅
08	UNION — Finding a Column Containing Text	🟡 Practitioner	✅
09	UNION — Retrieving Data from Other Tables	🟡 Practitioner	✅
10	UNION — Multiple Values in a Single Column	🟡 Practitioner	✅
11	Blind — Conditional Responses	🟡 Practitioner	✅
12	Blind — Conditional Errors	🟡 Practitioner	✅
13	Visible Error-Based	🟡 Practitioner	✅
14	Blind — Time Delays	🟡 Practitioner	✅
15	Blind — Time Delays and Information Retrieval	🟡 Practitioner	✅
16	Filter Bypass via XML Encoding	🟡 Practitioner	✅

Plataformas de estudo

• PortSwigger Web Security Academy

---

🇺🇸 English

Documentation of my practical studies and labs in offensive security, focused on pentesting and web applications.

Structure

security-writeups/
└── web-security/
    └── portswigger/
        ├── access-control/
        └── sql-injection/

📊 Progress by Category

Category	Progress	Apprentice	Practitioner	Total
Access Control & IDOR	██████████ 100%	9 ✅	4 ✅	13
SQL Injection	██████████ 100%	2 ✅	14 ✅	16
XSS	░░░░░░░░░░ 0%	—	—	coming soon

Writeups — Access Control & IDOR

#	Lab	Difficulty	Status
01	Unprotected Admin Functionality	🟢 Apprentice	✅
02	Unprotected Admin with Unpredictable URL	🟢 Apprentice	✅
03	User Role Controlled by Request Parameter	🟢 Apprentice	✅
04	User Role Modified in User Profile	🟢 Apprentice	✅
05	URL-Based Access Control Bypass	🟡 Practitioner	✅
06	Method-Based Access Control Bypass	🟡 Practitioner	✅
07	User ID Controlled by Request Parameter	🟢 Apprentice	✅
08	User ID with Unpredictable GUIDs	🟢 Apprentice	✅
09	User ID with Data Leakage in Redirect	🟢 Apprentice	✅
10	User ID with Password Disclosure	🟢 Apprentice	✅
11	Insecure Direct Object References (IDOR)	🟢 Apprentice	✅
12	Multi-Step Process with No Access Control	🟡 Practitioner	✅
13	Referer-Based Access Control	🟡 Practitioner	✅

Writeups — SQL Injection

#	Lab	Difficulty	Status
01	WHERE Clause — Retrieving Hidden Data	🟢 Apprentice	✅
02	Login Bypass	🟢 Apprentice	✅
03	UNION — Database Version (Oracle)	🟡 Practitioner	✅
04	UNION — Database Version (MySQL/Microsoft)	🟡 Practitioner	✅
05	UNION — Listing Contents (Non-Oracle)	🟡 Practitioner	✅
06	UNION — Listing Contents (Oracle)	🟡 Practitioner	✅
07	UNION — Determining Number of Columns	🟡 Practitioner	✅
08	UNION — Finding a Column Containing Text	🟡 Practitioner	✅
09	UNION — Retrieving Data from Other Tables	🟡 Practitioner	✅
10	UNION — Multiple Values in a Single Column	🟡 Practitioner	✅
11	Blind — Conditional Responses	🟡 Practitioner	✅
12	Blind — Conditional Errors	🟡 Practitioner	✅
13	Visible Error-Based	🟡 Practitioner	✅
14	Blind — Time Delays	🟡 Practitioner	✅
15	Blind — Time Delays and Information Retrieval	🟡 Practitioner	✅
16	Filter Bypass via XML Encoding	🟡 Practitioner	✅

Study platforms

• PortSwigger Web Security Academy

---

╔══════════════════════════════════════════════════╗
║         keep learning. keep breaking.            ║
║              keep documenting.                   ║
╚══════════════════════════════════════════════════╝

---

"The quieter you become, the more you are able to hear." — Kali Linux