> For the complete documentation index, see [llms.txt](https://notes.nomanaziz.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger.md).

# PortSwigger

- [Cross-origin resource sharing (CORS)](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors.md)
- [Access-Control-Allow-Origin response header](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/access-control-allow-origin-response-header.md)
- [Vulnerabilities arising from Misconfigurations](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations.md)
- [Server-generated ACAO header from client-specified Origin header](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/server-generated-acao-header-from-client-specified-origin-header.md)
- [Errors parsing Origin headers](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/errors-parsing-origin-headers.md)
- [Whitelisted null origin value](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/whitelisted-null-origin-value.md)
- [Exploiting XSS via CORS trust relationships](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/exploiting-xss-via-cors-trust-relationships.md)
- [Breaking TLS with poorly configured CORS](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/breaking-tls-with-poorly-configured-cors.md)
- [Intranets and CORS without credentials](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/intranets-and-cors-without-credentials.md)
- [Mitigations](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/cross-origin-resource-sharing-cors/vulnerabilities-arising-from-misconfigurations/mitigations.md)
- [Sql Injection](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection.md)
- [Examining the database](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection/examining-the-database.md)
- [Retrieving data from other database tables](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection/retrieving-data-from-other-database-tables.md)
- [Blind SQL injection](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection/blind-sql-injection.md)
- [Mitigation](https://notes.nomanaziz.me/cybersecurity/penetration-testing/portswigger/sql-injection/mitigation.md)