📌 This repository contains my personal security writeups for
PortSwigger Web Security Academy labs.

🌍 Each lab is documented in:

• 🇬🇧 English
• 🇸🇦 Arabic

🎯 The focus of these writeups is not only solving the lab, but understanding vulnerabilities from an attacker’s mindset:

• 🔍 Why the vulnerability exists
• ⚔️ How it can be exploited
• 💥 What impact it has
• 🛠️ How it should be properly fixed

• 🚫 Broken Access Control (OWASP Top 10 – A01:2025)
• 💉 SQL Injection
• 🧠 Cross-Site Scripting (XSS)
• 🔐 Authentication & Authorization
• 🧩 Business Logic Vulnerabilities

• 🧪 Improve exploitation methodology
• 🧠 Develop security thinking
• 📝 Practice clear and professional documentation
• 🌱 Build a public learning portfolio

🚨 All labs are intentionally vulnerable and provided by
PortSwigger Web Security Academy.
This content is for educational purposes only.

👨‍💻 Ghassan Al-Mansouri
🔗 Cybersecurity | Web Security | Pentesting