Web attacks

Methodology & Academy OWASP Top 10 Avoid Aggressive Scanning Web Enumeration Fuzzing Bypass 403 / 401 Registration Form Email Verification Bypass Email injections Phone Number Injection Login Forms Attacks Bypass Captcha OAuth Misconfiguration 2FA / OTP Password Reset SQL Injection NoSQL injection LDAP Injection XSS SSI Injection, Server Side Include Injection CSP Bypass File Inclusion LFI / RFI File Upload Attacks Command Injection Markdown injection HTTP Verb Tampering HTTP Header Exploitation HTTP Request Smuggling Price Manipulation Methods Testing Credit Cards Cookies Misconfiguration JWT Token IDOR XXE SSTI CSTI SSRF CSRF CORS Open Redirection CSPT Relative Path Overwrite, RPO CRLF Injection JSON Attack Prototype Pollution Web Mass Assignment Web Cache Tabnabbing WAF Bypass CMS Django Flask / Werkzeug Tomcat (8080)Tomcat CGI Nginx IIS Exchange / OWA GitLab Jenkins Splunk Elasticsearch PRTG Network Monitor osTicket ColdFusion Nagios Webmin Slack Moodle Jira

PreviousEncryption NextMethodology & Academy

Was this helpful?