Application Logic Flaws
Application Logic Flaws — methodology, techniques, and references.
Arbitrary Cookie Flags
Arbitrary Cookie Flags — methodology, techniques, and references.
Back button attack
Back button attack — methodology, techniques, and references.
Broken Authentication
Broken Authentication — methodology, techniques, and references.
BruteForce Attack
BruteForce Attack — methodology, techniques, and references.
Captcha Bypass
Captcha Bypass — methodology, techniques, and references.
Clickjacking
1 item
Command Injection
Command Injection — methodology, techniques, and references.
CORS
CORS — methodology, techniques, and references.
Credential Stuffing
Credential Stuffing — methodology, techniques, and references.
CRLF
CRLF — methodology, techniques, and references.
Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) is an attack that tricks a user into executing unwanted actions on a web application where they are authenticated. By…
Deserialization Vulnerability
1. User Input: Test serialized data from forms, APIs, or URL parameters.
Directory Traversal
Directory Traversal — methodology, techniques, and references.
Host Header Injection
Host Header Injection — methodology, techniques, and references.
IDOR
Got it! Here's a nicely formatted and easy-to-read Markdown table and cheatsheet for IDOR (Insecure Direct Object Reference) payloads, bypasses, and…
Improper Error Handling
Improper Error Handling — methodology, techniques, and references.
Information Disclosure
Information Disclosure — methodology, techniques, and references.
Insecure Object Storage
Insecure Object Storage — methodology, techniques, and references.
Insufficient Security Controls
Insufficient Security Controls — methodology, techniques, and references.
Insufficient Transport Layer Protection
Insufficient Transport Layer Protection — methodology, techniques, and references.
Misconfigured HTTP Headers
Misconfigured HTTP Headers — methodology, techniques, and references.
Open File Upload
Open File Upload — methodology, techniques, and references.
Open Redirect
Open Redirect — methodology, techniques, and references.
Outdated TLS Version
Outdated TLS Version — methodology, techniques, and references.
Path Traversal
Path Traversal — methodology, techniques, and references.
Privilege Escalation
Privilege Escalation — methodology, techniques, and references.
Race Condition
Race Condition — methodology, techniques, and references.
Remote Code Execution (RCE)
This payload is designed to exploit a Remote Code Execution (RCE) vulnerability through a file upload mechanism that accepts .jpg files. The payload is…
Security Header Missing
Security Header Missing — methodology, techniques, and references.
Server Misconfigurations
Server Misconfigurations — methodology, techniques, and references.
Server-Side Template Injection (SSTI)
Server-Side Template Injection (SSTI) is a type of security vulnerability that occurs when user input is insecurely embedded in server-side templates,…
Session Fixation
Session Fixation — methodology, techniques, and references.
SQL Injection
1 item
SSRF
SSRF — methodology, techniques, and references.
tabnabbing
tabnabbing — methodology, techniques, and references.
Unrestricted File Upload
Unrestricted File Upload — methodology, techniques, and references.
Unsecured API Endpoints
Unsecured API Endpoints — methodology, techniques, and references.
Unvalidated Redirects and Forwards
Unvalidated Redirects and Forwards — methodology, techniques, and references.
Weak Ciphers
Weak Ciphers — methodology, techniques, and references.
Web Cache Deception
Web Cache Deception — methodology, techniques, and references.
XML External Entity (XXE)
XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing…
XSS
2 items