Web Security Academy - your questions answered
Summary: PortSwigger published a FAQ for its Web Security Academy, which is approaching 200 labs, answering common learner questions drawn from responses to a company tweet. The post recommends starting with SQL injection (16 labs), then server-side topics such as authentication, directory traversal, and command injection, and points to a suggested learning path and solutions for every lab.
Why it matters: The Academy is a free, online training ground built in place of a third edition of the Web Application Hacker's Handbook, and PortSwigger says it has no plans to take the learning experience offline - so the practical web-attack skills your defenders need are available to anyone, including attackers, at no cost.
Read the original at PortSwigger Research ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026