> For the complete documentation index, see [llms.txt](https://repo.4pfsec.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://repo.4pfsec.com/portswigger-labs.md).

# PortSwigger Labs

- [Authentication](https://repo.4pfsec.com/portswigger-labs/authentication.md): https://portswigger.net/web-security/authentication
- [Username enumeration via different responses](https://repo.4pfsec.com/portswigger-labs/authentication/username-enumeration-via-different-responses.md): This lab is vulnerable to username enumeration and password brute-force attacks.
- [Username enumeration via subtly different responses](https://repo.4pfsec.com/portswigger-labs/authentication/username-enumeration-via-subtly-different-responses.md): This lab is subtly vulnerable to username enumeration and password brute-force attacks.
- [Username enumeration via response timing](https://repo.4pfsec.com/portswigger-labs/authentication/username-enumeration-via-response-timing.md): This lab is vulnerable to username enumeration using its response times.