📄️ XSS
Resources
📄️ Authentification flaws
Direct access
📄️ File upload attacks
- payloadallthethings
📄️ Graphql
Resources
📄️ Local file inclusion
- Hacktricks
📄️ Nodejs
Prototype Pollution
📄️ Obfuscation / Encoding
JS Obfuscation / Encoding
📄️ Poisoning
Log poisoning
📄️ SSRF
Tips
📄️ SSTI
Resources
📄️ Web proxies
Proxychains
📄️ Web shells
- Laudanum
📄️ Wordpress
wpscan
📄️ XXE
Tips