Web Application Penetration Testing

API Hacking Advanced SQLi Authentication Tokens Bypass Browser Desync CMS Attacks Command Injection Cross-Site Request Forgery (CSRF)Cross-Site Scripting (XSS)Database navigation Directory Path Traversal Exposed Github Repositories Dumping FastCGI Git Hooks GraphQL Pentesting HTTP/2 Request Tunneling HTTP Attacks HTTP Code 403 (Forbidden) Bypass HTTP Misconfigurations HTTP Request Smuggling through Websocket Insecure Deserialization Insecure Direct Object Reference (IDOR)Jetty Web Server RCE LDAP Injection LaTeX Local File Inclusion Local File Inclusion (LFI)Log Poisoning NoSQL Injection Object Relational Mapping (ORM) Injection PDF Generation Vulnerabilities PHP Assertions RCE PHP Filter Chain LFI to RCE Type Juggling PHP Vulnerabilities Padding Oracle Attack Prototype Pollution Python Werkzeug PIN Exploit Remote Code Execution (RCE)Remote File Inclusion (RFI)SQL Injection (SQLi)SSL-TLS Attacks Sensitive Files Serialization RCE Server Side Template Injection (SSTI)Server-Side Request Forgery (SSRF)Springboot Application Pentesting Subdomain Enumeration Symfony Pentesting Upload Vulnerabilities XML External Entity (XXE) Injection XPath Injection Tunneling requests via h2c smuggling Authentication Tokens Bypass Techniques Playbooks Scripts

PreviousVarious Pivoting Techniques NextAPI Hacking

Last updated 8 months ago