01 payload Account Takeover 2 pages 02 payload API Key Leaks 2 pages 03 payload Brute Force Rate Limit 1 page 04 payload Business Logic Errors 1 page 05 payload Clickjacking 1 page 06 payload Client Side Path Traversal 1 page 07 payload Command Injection 1 page 08 payload CORS Misconfiguration 1 page 09 payload CRLF Injection 1 page 10 payload Cross-Site Request Forgery 1 page 11 payload CSS Injection 1 page 12 payload CSV Injection 1 page 13 payload CVE Exploits 2 pages 14 payload Denial of Service 1 page 15 payload Dependency Confusion 1 page 16 payload Directory Traversal 1 page 17 payload DNS Rebinding 1 page 18 payload DOM Clobbering 1 page 19 payload Encoding Transformations 1 page 20 payload External Variable Modification 1 page 21 payload File Inclusion 3 pages 22 payload Google Web Toolkit 1 page 23 payload GraphQL Injection 1 page 24 payload Headless Browser 1 page 25 payload Hidden Parameters 1 page 26 payload HTTP Parameter Pollution 1 page 27 payload Insecure Deserialization 7 pages 28 payload Insecure Direct Object References 1 page 29 payload Insecure Management Interface 1 page 30 payload Insecure Randomness 1 page 31 payload Insecure Source Code Management 5 pages 32 payload Java RMI 1 page 33 payload JSON Web Token 1 page 34 payload LaTeX Injection 1 page 35 payload LDAP Injection 1 page 36 payload Mass Assignment 1 page 37 payload Methodology and Resources 34 pages 38 payload NoSQL Injection 1 page 39 payload OAuth Misconfiguration 1 page 40 payload Open Redirect 1 page 41 payload ORM Leak 1 page 42 payload Prompt Injection 1 page 43 payload Prototype Pollution 1 page 44 payload Race Condition 1 page 45 payload Regular Expression 1 page 46 payload Request Smuggling 1 page 47 payload Reverse Proxy Misconfigurations 1 page 48 payload SAML Injection 1 page 49 payload Server Side Include Injection 1 page 50 payload Server Side Request Forgery 3 pages 51 payload Server Side Template Injection 8 pages 52 payload SQL Injection 10 pages 53 payload Tabnabbing 1 page 54 payload Type Juggling 1 page 55 payload Upload Insecure Files 2 pages 56 payload Virtual Hosts 1 page 57 payload Web Cache Deception 1 page 58 payload Web Sockets 1 page 59 payload XPATH Injection 1 page 60 payload XS-Leak 1 page 61 payload XSLT Injection 1 page 62 payload XSS Injection 6 pages 63 payload XXE Injection 1 page 64 payload Zip Slip 1 page