Ctrlk

Enumeration
Content Discovery
API hacking
CORS Misconfiguration
XSS
SSRF
Account take over
IDOR
Access control vulnerabilities and privilege escalation
HTTP Request Smuggling / HTTP Desync Attack
Subdomain Takeovers
Resources
403 Bypass
Log4J
Bypassing Client-Side Controls
BACKUP FILES /Backup Archives:
Attacking Authentication
DNS enumeration/DNS recon-reading
Subdomain Enumeration-reading
Subdomain Takeover
File upload vulnerabilities
CRLF

Powered by GitBook

On this page

CORS Misconfiguration

https://medium.com/swlh/exploiting-cors-misconfiguration-vulnerabilities-2a16b5b979

PreviousAPI hacking NextXSS

Last updated 1 year ago