Reference Guide

Web App Hacking

Authentication Vulnerabilities JavaScript Obfuscation Security Headers

Broken Access Control

Cross-Site Request Forgery (CSRF)

Cross-Site Scripting (XSS)

Information Disclosure

Insecure Deserialization

Insecure Direct Object Reference (IDOR)

Race Conditions

Remote Code Execution (RCE)

Same-Origin Policy Vulnerabilities

Server Side Request Forgery (SSRF)

SSO Security Issues

Template Injection (SSTI)

XML External Entity

Reference Guide Web App Hacking

Reporting

For scoring a vulnerability use scoring systems like CVSS of first.org: https://www.first.org/cvss/.

Remote Code Execution (RCE)

Previous Page

Same-Origin Policy Vulnerabilities

Next Page