API Testing - Applied Review
Application Programming Interfaces (APIs) allow for different software systems and applications to share data. An example of this might be a weather …
CSRF - Applied Review
Cross-site request forgery allows an attacker to perform any actions that a normal user is able to. These attacks, when performed properly, can cause …
Clickjacking - Applied Review
Before we get into the content here I want to clarify that I wasn’t able to find any CTF-type examples of clickjacking, so if you know of one please …
Cross-Origin Resource Sharing - Applied Review
Cross-origin resource sharing (CORS) is a browser mechanism that allows for controlled access to resources located outside the original domain. It is …
XSS (Cross-Site Scripting) - Applied Review
This is going to be a longer post, so I am leaving out some more intuitive pieces of information like explaining impact and testing strategies because …
NoSQL Injection - Applied Review
These types of attacks occur when attackers interfere with the queries that the web application sends to a NoSQL database. This could lead to …
XXE Injection | Applied Review
This vulnerability has to do with how certain web applications process XML data. If attackers are able to exploit this vulnerability, they can often …
SSRF - Applied Review
SSRF is a vulnerability that allows attackers to cause the application to make requests to an unintended location from the server that the application …
Race Conditions - Applied Review
Race conditions are relatively common and are closely related to business logic flaws. A collision occurs when multiple distinct threads try to …
File Upload - Applied Review
These vulnerabilities are often present when web applications contain file upload functionality that do not sufficiently validate things like the …
Access Control - Applied Review
Access control is how we describe the constraints that we place on an authorized user in the context of accessing resources and performing actions. …
Business Logic Flaws - Applied Review
Business logic vulnerabilities are flaws in the design or implementation of an application that let attackers produce unintended behavior. This can …