Norbert Skwierczynski
Full-Stack Developer | Cybersecurity
Interactive security lab
Real vulnerabilities. Real attacks. Safe environment.
A brute force attack tries many passwords until one succeeds. Weak passwords are easy to guess, so protecting login forms is critical to stop attackers from gaining access.
Password list
SQL injection allows malicious input to alter the database query. It matters because attackers can bypass filters and retrieve all records from the system.
SQL Query
SELECT * FROM users WHERE username = '';
Search results
XSS injects script into a web page so it runs in another user's browser. It matters because it can hijack sessions and manipulate page content without server permission.
Command injection occurs when user input is run by the server shell. It matters because attackers can execute system commands and access sensitive server data.
Unsafe file upload handling lets attackers store executable files on the server. It matters because those files can be accessed and run later as if they were trusted content.