Understand the attack surface.
Strengthen the defence.
A searchable reference library for vulnerability research, secure development, CTFs, and authorized penetration testing.
Explore the library
_LEARNING_AND_SOCIALS
3 documents in this topic
_template_vuln
1 document in this topic
Account Takeover
2 documents in this topic
API Key Leaks
2 documents in this topic
Brute Force Rate Limit
1 document in this topic
Business Logic Errors
1 document in this topic
Clickjacking
1 document in this topic
Client Side Path Traversal
1 document in this topic
Command Injection
1 document in this topic
CORS Misconfiguration
1 document in this topic
CRLF Injection
1 document in this topic
Cross-Site Request Forgery
1 document in this topic
CSS Injection
1 document in this topic
CSV Injection
1 document in this topic
CVE Exploits
2 documents in this topic
Denial of Service
1 document in this topic
Dependency Confusion
1 document in this topic
Directory Traversal
1 document in this topic
DNS Rebinding
1 document in this topic
DOM Clobbering
1 document in this topic
Encoding Transformations
1 document in this topic
External Variable Modification
1 document in this topic
File Inclusion
3 documents in this topic
Google Web Toolkit
1 document in this topic
GraphQL Injection
1 document in this topic
Headless Browser
1 document in this topic
Hidden Parameters
1 document in this topic
HTTP Parameter Pollution
1 document in this topic
Insecure Deserialization
7 documents in this topic
Insecure Direct Object References
1 document in this topic
Insecure Management Interface
1 document in this topic
Insecure Randomness
1 document in this topic
Insecure Source Code Management
5 documents in this topic
Java RMI
1 document in this topic
JSON Web Token
1 document in this topic
LaTeX Injection
1 document in this topic
LDAP Injection
1 document in this topic
Mass Assignment
1 document in this topic
Methodology and Resources
33 documents in this topic
NoSQL Injection
1 document in this topic
OAuth Misconfiguration
1 document in this topic
Open Redirect
1 document in this topic
ORM Leak
1 document in this topic
Prompt Injection
1 document in this topic
Prototype Pollution
1 document in this topic
Race Condition
1 document in this topic
Regular Expression
1 document in this topic
Request Smuggling
1 document in this topic
Reverse Proxy Misconfigurations
1 document in this topic
SAML Injection
1 document in this topic
Server Side Include Injection
1 document in this topic
Server Side Request Forgery
3 documents in this topic
Server Side Template Injection
8 documents in this topic
SQL Injection
10 documents in this topic
Tabnabbing
1 document in this topic
Type Juggling
1 document in this topic
Upload Insecure Files
2 documents in this topic
Virtual Hosts
1 document in this topic
Web Cache Deception
1 document in this topic
Web Sockets
1 document in this topic
XPATH Injection
1 document in this topic
XS-Leak
1 document in this topic
XSLT Injection
1 document in this topic
XSS Injection
6 documents in this topic
XXE Injection
1 document in this topic
Zip Slip
1 document in this topic
Continue learning
Search the imported chapters for a vulnerability, product, protocol, or mitigation.
Payloads All The Things
Community-maintained security notes and payload references by Swissky and contributors. This viewer is an independent PHP presentation layer.
Repository, contributors & license ↗