Web Security Academy
Free written lessons and hundreds of hands-on labs where you exploit real vulnerabilities, from SQL injection and access control to JWT attacks and API testing, built by the team behind Burp Suite. Attacking a flaw yourself teaches you to prevent it far better than reading a list of risks.
Platform
Web Development
PortSwigger
Intermediate
Free
Free written lessons and hundreds of hands-on labs where you exploit real vulnerabilities, from SQL injection and access control to JWT attacks and API testing, built by the team behind Burp Suite. Attacking a flaw yourself teaches you to prevent it far better than reading a list of risks.
Ready to start?
Opens on PortSwigger in a new tab.
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.
Follow along
New writing, resources and project ideas land here first.