Reconnaissance
Discover hidden endpoints, backup files, and HTTP methods
SQL Injection
Exploit raw SQL queries to bypass auth and extract data
Cross-Site Scripting
Inject JavaScript through reflected, stored, and DOM-based XSS
Command Injection
Execute OS commands through unsanitized shell calls
LFI/RFI
Read arbitrary files and achieve remote code execution
CSRF
Forge cross-site requests to perform unauthorized actions
Authentication Bypass
Break weak auth, enumerate users, and hijack sessions
File Upload
Upload malicious files through missing or weak validation
SSRF
Force the server to make requests to internal services
IDOR
Access other users' data via insecure direct object references
JWT Attacks
Forge, crack, and manipulate JSON Web Tokens
XXE Injection
Exploit XML parsers to read files and perform SSRF
SSTI
Server-Side Template Injection for RCE
Insecure Deserialization
Exploit pickle/deserialization to achieve RCE
Race Conditions
Exploit TOCTOU and race window vulnerabilities
Business Logic
Abuse flawed business rules and workflow assumptions
CORS Misconfig
Exploit misconfigured CORS policies to steal data
Prototype Pollution
Pollute prototypes for privilege escalation and RCE
GraphQL
Exploit GraphQL introspection, IDOR, and batching
NoSQL Injection
Inject NoSQL operators to bypass auth and extract data