r/tryhackme • u/Wavrryn • 15h ago

Web vuln advise

I've been trying to learn the basic web vulns from portswigger web academy. The issue isn't that I'm not trying hard enough... the issue is the academy doesn't exactly teach you what payloads you may need, or what exact kind of situations you may cone across.

Can anyone, from a newbie who just started to a professional give me a proper learning technique, and I mean in detail cuz I've seen enough "learn from tryhackme, hackthebox etc etc", I just need the methodology on how to learn. Pls and ty.

2 Upvotes

100% Upvoted

2 comments sorted by

3

u/UBNC 0xD [God] 9h ago

I’ve done most of portswigger academy, it does not hand you the solutions most of the time, but if you understand the learning context it provides enough to solve.

Sounds like maybe you need to slow down and try understand the learning context more.

I built documentation on each section of learning eg XSS reflected, XSS stored, SQLi out into its own check list of things to try and also techniques. Then once the section was complete used the random labs for that section till I could reliably solve them.

2

u/Wavrryn 4h ago

That helps, thanks