Ctrlk

Enumeration
Content Discovery
API hacking
CORS Misconfiguration
XSS
SSRF
Account take over
IDOR
Access control vulnerabilities and privilege escalation
HTTP Request Smuggling / HTTP Desync Attack
Subdomain Takeovers
Resources
403 Bypass
Log4J
Bypassing Client-Side Controls
BACKUP FILES /Backup Archives:
Attacking Authentication
DNS enumeration/DNS recon-reading
Subdomain Enumeration-reading
Subdomain Takeover
File upload vulnerabilities
CRLF

Powered by GitBook

On this page

Resources

Access controll by[ass https://portswigger.net/web-security/access-control

WSTG Contents

PreviousSubdomain Takeovers Next403 Bypass

Last updated 2 years ago