Pentesting and Red Teaming Notes

Web Application Pentesting(BlackBox)

SQL Injection Blind SQL Injection Path Traversal Attacking Authentication Race Conditions Business Logic Vulnerabilities Command Injections Information disclosure Access Controls File upload Attacks XXE Server Side Request Forgery Api Testing noSQL DOM based vulnerabilities Cross Site scripting

PreviousPentesting and Red Teaming Cheatsheet NextSQL Injection