---
description: >-
  Journey into exploitation of the most commonly available service on a server:
  the legendary port 80/443!
---

# Introduction

## Purposely vulnerable websites for testing

### Acunetix

{% embed url="http://www.vulnweb.com/" %}

### OWASP juice shop

{% embed url="https://demo.owasp-juice.shop/#/" %}

## Useful references

### OWASP secure headers project

{% embed url="https://owasp.org/www-project-secure-headers/" %}

### Portswigger URL validation bypass cheat sheet&#x20;

{% embed url="https://portswigger.net/web-security/ssrf/url-validation-bypass-cheat-sheet" %}
