Security

CIA Triad 2023041317275050 CIA Triad

Security principles _index202304131834333 Security principles

XSS 2023042015372828 XSS

• XSS Types
  • 2023042615423737 Reflected Server XSS
  • 2023042618302828 Stored Server XSS
  • 2023042618315454 Reflected Client XSS
  • 2023042618331111 Stored Client XSS
• 2023042721252929 Stealing cookie XSS
• 2023042722275252 Stealing local storage XSS
• 2023042721181010 XSS external JS payload
• 2023042801143030 Keylogging XSS
• 2023042801401414 Stealing Saved Password XSS
• 2023072521342323 XSS Send request result to an attacker machine
• 2023042900595252 Phishing Users
• 202304301516077 Inject external script in url

Cross site attacks

• 202305010008044 CSRF
• 2023043023452929 CORS SOP
• 202304302357011 Same site Cookies
• 2023090416443232 Weak CORS Policies

SQL Injection

• 202305042013000 SQL Operations
• 2023050422584646 SQL Injection
  • 2023081617194747 SQL Injection number of table column
  • 2023081617423030 SQL injection return all items in the table
  • 202305051825099 SQL Injection Error based payloads
  • 202305051829000 SQL Injection UNION-based Payloads
  • 202305051829033 SQL Injection Stacked Queries
  • 2023050518282929 SQL Injection Reading and Writing Files
  • 2023050518285757 SQL Injection Remote Code Execution
  • 202305091539011 SQL Map

Command injection 2023051521093838 Command Injection

• 2023090517502828 CMD Injection. Command Channing
• 2023090517513333 CMD Injection. Embedded command
• 2023090517533434 CMD Injection. Send the result of command to an attacker's machine
• 2023090517563535 CMD Injection. Blind command execution
• 2023090517593737 CMD Injection. How to bypass application protection mechanisms
• 2023090518011919 CMD Injection. Check availability of commands
• 2023090518034747 CMD Injection. Encoding payload using urlencode
• 2023090518055757 CMD Injection. Word lists
• 2023050701263232 Web Shells

Other

• _index2023041802293131 Security Tools
• 2023051318534545 Directory Traversal or Path Traversal
• 2023051417011010 XML
• 2023051512325757 SSTI
• 2023052320455959 IDOR Insecure Direct Object Referencing
• 202305201524033 SSRF Server-side Request Forgery
  • 2023090518224444 SSRF with gopher
• 2023050100285757 Top vulnerabilities
• 2023072521412626 Research algorithm
• 2023061505154848 Password brute force
• 2023090121282424 Fuzzing a site directories
• 2023041802275252 Proxy
  • 202304181408000 use proxy in firefox