Server-Side Javascript Injection

SSJI Attack

More Articles

Client-Side Desync Attack

CSD Attack

Path Traversal (Directory traversal)

LDAP Injection

Open Redirect

Prototype Pollution

CSTI Attack

Client-Side Template Injection

Email Injection

SMTP Injection & Mail Injection

Github-Action Injection

XSS

Cross-Site Scripting

Type Juggling

Loose Comparison Bug

IDOR Attack

Insecure Direct Object Reference

JSONP Hijacking

CSRF

Cross-Site Request Forgery

Cookie Bomb Attack

XST

Cross-Site Tracing

SSRF

Server-Side Request Forgery

XSHM Attack

Cross Site History Manipulation

HTTP Parameter Pollution

HPP Attack

ESI Injection

Edge Side Include Injection

Subdomain Takeover

SAML Injection

SSTI Attack

Server-Side Template Injection

EL Injection

Expression Language Injection

CRLF Injection

RFD Attack

Remote File Download

GraphQL Injection

Zip Slip

XS-Leaks

JSON Hijacking

HTTP Request Smuggling

HRS Attack

CSS Injection

Insecure File Upload

CSV Injection

Regex Injection

Log Injection

Command Injection

NoSQL Injection

Dependency Confusion

File Inclusion

LFI & RFI

DOM Clobbering

Websocket Connection Smuggling

WCS Attack

ReDOS Attack

Regex DOS

SNI Injection

LaTex Injection

XXE

XML External Entity

Insecure Deserialization

SQL Injection

Zip Bomb

ORM Injection

Brute Force

Relative Path Overwrite

RPO Attack

Click Jacking

CSWSH Attack

Cross-Site WebSocket Hijacking

Web Cache Deception

H2C Smuggling

Web Cache Poisoning

Reverse Tabnabbing

OGNL Injection

Object-Graph Navigation Language Injection