Some topic for self Learning

SUBMITTED BY: jaichandtanishq

DATE: Oct. 15, 2018, 9:24 a.m.

FORMAT: Text only

SIZE: 3.6 kB

Raw Download

HITS: 383

Report
  1. [+] Sql Injection Attack
  2. [+] Hibernate Query Language Injection
  3. [+] Direct OS Code Injection
  4. [+] XML Entity Injection
  5. [+] Broken Authentication and Session
  6. Management
  7. [+] Cross-Site Scripting (XSS)
  8. [+] Insecure Direct Object References
  9. [+] Security Misconfiguration
  10. [+] Sensitive Data Exposure
  11. [+] Missing Function Level Access Control
  12. [+] Cross-Site Request Forgery (CSRF)
  13. [+] Using Components with Known Vulnerabilities
  14. [+] Unvalidated Redirects and Forwards
  15. [+] Cross Site Scripting Attacks
  16. [+] Click Jacking Attacks
  17. [+] DNS Cache Poisoning
  18. [+] Symlinking – An Insider Attack
  19. [+] Cross Site Request Forgery Attacks
  20. [+] Remote Code Execution Attacks
  21. [+] Remote File inclusion
  22. [+] Local file inclusion
  23. [+] EverCookie
  24. [+] Denial oF Service Attack
  25. [+] Cookie Eviction
  26. [+] PHPwn
  27. [+] NAT Pinning
  28. [+] XSHM
  29. [+] MitM DNS Rebinding SSL/TLS Wildcards and
  30. XSS
  31. [+] Quick Proxy Detection
  32. [+] Improving HTTPS Side Channel Attacks
  33. [+] Side Channel Attacks in SSL
  34. [+] Turning XSS into Clickjacking
  35. [+] Bypassing CSRF protections with Click
  36. Jacking and
  37. [+] HTTP Parameter Pollution
  38. [+] URL Hijacking
  39. [+] Stroke Jacking
  40. [+] Fooling B64_Encode(Payload) on WAFs And
  41. Filters
  42. [+] MySQL Stacked Queries with SQL Injection.
  43. [+] Posting Raw XML cross-domain
  44. [+] Generic Cross-Browser Cross-Domain theft
  45. [+] Attacking HTTPS with Cache Injection
  46. [+] Tap Jacking
  47. [+] XSS - Track
  48. [+] Next Generation Click Jacking
  49. [+] XSSing Client-Side Dynamic HTML.
  50. [+] Stroke triggered XSS and Stroke Jacking
  51. [+] Lost iN Translation
  52. [+] Persistent Cross Interface Attacks
  53. [+] Chronofeit Phishing
  54. [+] SQLi Filter Evasion Cheat Sheet (MySQL)
  55. [+] Tabnabbing
  56. [+] UI Redressing
  57. [+] Cookie Poisoning
  58. [+] SSRF
  59. [+] Bruteforce of PHPSESSID
  60. [+] Blended Threats and JavaScript
  61. [+] Cross-Site Port Attacks
  62. [+] CAPTCHA Re-Riding Attack
  64. *Web Application Attacks List :*
  65. Arbitrary file access
  66. Binary planting
  67. Blind SQL Injection
  68. Blind XPath Injection
  69. Brute force attack
  70. Buffer overflow attack
  71. Cache Poisoning
  72. Cash Overflow
  73. Clickjacking
  74. Command injection attacks
  75. Comment Injection Attack
  76. Content Security Policy
  77. Content Spoofing
  78. Credential stuffing
  79. Cross Frame Scripting
  80. Cross Site History Manipulation (XSHM)
  81. Cross Site Tracing
  82. Cross-Site Request Forgery (CSRF)
  83. Cross Site Port Attack (XSPA)
  84. Cross-Site Scripting (XSS)
  85. Cross-User Defacement
  86. Custom Special Character Injection
  87. Denial of Service
  88. Direct Dynamic Code Evaluation (‘Eval Injection’)
  89. Execution After Redirect (EAR)
  90. Exploitation of CORS
  91. Forced browsing
  92. Form action hijacking
  93. Format string attack
  94. Full Path Disclosure
  95. Function Injection
  96. Host Header injection
  97. HTTP Response Splitting
  98. HTTP verb tampering
  99. HTML injection
  100. LDAP injection
  101. Log Injection
  102. Man-in-the-browser attack
  103. Man-in-the-middle attack
  104. Mobile code: invoking untrusted mobile code
  105. Mobile code: non-final public field
  106. Mobile code: object hijack
  107. One-Click Attack
  108. Parameter Delimiter
  109. Page takeover
  110. Path Traversal
  111. Reflected DOM Injection
  112. Regular expression Denial of Service – ReDoS
  113. Repudiation Attack
  114. Resource Injection
  115. Server-Side Includes (SSI) Injection
  116. Session fixation
  117. Session hijacking attack
  118. Session Prediction
  119. Setting Manipulation
  120. Special Element Injection
  121. SMTP injection
  122. SQL Injection
  123. SSI injection
  124. Traffic flood
  125. Web Parameter Tampering
  126. XPATH Injection
  127. XSRF or SSRF
comments powered by Disqus