# Learn Web Security With PortSwigger

Hey guys ✌🏻, I share my self-study journey in Web Security here, hoping these notes provide something useful for both newcomers and experienced folks.

## Summary

In my third year studying Information Security, I realized that what we learn in class is just the basics. To become a real `hacker` 👌🏻, self-study and practice are essential.

Feeling unsure and confused, I decided to dive into PortSwigger Labs—the only platform I knew at the time for learning Web Security properly.

> **PortSwigger** is a very comprehensive platform for Web Security, with the highlight being *PortSwigger Academy*—a huge collection of labs where you can practice from basic to advanced levels. I spent over a month working through these labs, which was tough but very rewarding.

## Labs I Completed

* [SQL Injection Attack](https://www.nh4ttruong.me/post/portswigger-SQL-Injection)
    
* [File Upload Vulnerability Exploit](https://www.nh4ttruong.me/post/portswigger-file-upload)
    
* [OAuth 2.0 Authentication Attack](https://www.nh4ttruong.me/post/portswigger-oauth2-vuln)
    
* [XSS Attack](https://www.nh4ttruong.me/post/portswigger-XSS)
    

## Hmmm...

Honestly, I'm *pretty lazy*. Writing these notes helps me remember and serves as a little diary of my self-study journey in Web Security. If you're also searching for direction, don't hesitate to start with the small steps.l things. Let’s Go!