XSS - Cross Site Scripting
XSS in an input validation weakness which allows an attacker to inject a payload into a response from the application. When the payload can included HTML/ »
XXE - XML External Entity
The XML External Entity (XXE) attack is a type of attack against an application that parses XML input. An XXE attack typically occurs when XML input »
Unrestricted File Upload
Many web applications allow users to upload content. The content may be images, word documents, audio and video files etc. This upload facility however exposes a »
SSRF - Server Side Request Forgery
Server Side Request Forgery (SSRF) is a vulnerability that describes the behaviour of a server making a request that is under the attackers control. When using »
SQL Injection Techniques
Basic ' or '1'='1 ' OR '1'='1' -- ' OR '1'='1' ({ ' OR '1'='1' /* Error based Enumeration: (ID parameter in url is »
nmap to grab low hanging fruit
Using nmap alongside searchsploit in Kali Linux to grab any low hanging fruit: nmap -p- -sV -oX 71-new.xml 10.10.10.71; searchsploit --nmap 71-new. »