Expert-Led Courses
Structured learning paths built by elite hackers and engineers. 30 courses in Web Pentest •
What Is Clickjacking?
// VULNERABLE: Direct use without allow-list
What Is Cross-Site Scripting?
Cross-site scripting (XSS) is a class of security vulnerability that occurs when an application includes untrusted data in its output without proper validation or encoding.
What Is Information Disclosure?
// VULNERABLE: Direct use without allow-list
What Is OAUTH?
// VULNERABLE: Direct use without allow-list
What Is SQL Injection?
SQL injection (SQLi) is a class of security vulnerability that occurs when an application includes untrusted data in a SQL query without proper sanitization or parameterization.
What Is Serialization? **Serialization** Is the Process of Converting Complex Da
// VULNERABLE: Direct use without allow-list
What Is Server-Side Template Injection?
// VULNERABLE: Direct use without allow-list
What Is Web Cache Poisoning?
// VULNERABLE: Direct use without allow-list
What Is the HTTP
Host header? The HTTP Host header is a mandatory request header as of HTTP/1.1.
XML External Entity (XXE) Injection
// VULNERABLE: XXE via DTD + external entities enabled (libxml)