# Attacks

- [Known Exploit](/g37sys73ms-manual/web-application/attacks/known-exploit.md)
- [Jenkins](/g37sys73ms-manual/web-application/attacks/known-exploit/jenkins.md)
- [Drupal](/g37sys73ms-manual/web-application/attacks/known-exploit/drupal.md)
- [Wordpress](/g37sys73ms-manual/web-application/attacks/known-exploit/wordpress.md)
- [API Pentesting](/g37sys73ms-manual/web-application/attacks/api-pentesting.md)
- [Mass assignment vulnerabilities](/g37sys73ms-manual/web-application/attacks/api-pentesting/mass-assignment-vulnerabilities.md)
- [Preventing vulnerabilities in APIs](/g37sys73ms-manual/web-application/attacks/api-pentesting/preventing-vulnerabilities-in-apis.md)
- [Server-side parameter pollution](/g37sys73ms-manual/web-application/attacks/api-pentesting/server-side-parameter-pollution.md)
- [API From PEN200](/g37sys73ms-manual/web-application/attacks/api-pentesting/api-from-pen200.md): A BlackBox Approach
- [Authentication](/g37sys73ms-manual/web-application/attacks/authentication.md)
- [Authorization](/g37sys73ms-manual/web-application/attacks/authentication/authorization.md)
- [Client Side Attacks](/g37sys73ms-manual/web-application/attacks/client-side-attacks.md)
- [Open Redirection](/g37sys73ms-manual/web-application/attacks/client-side-attacks/open-redirection.md)
- [XSS](/g37sys73ms-manual/web-application/attacks/client-side-attacks/xss.md)
- [Privilege Escalation via XSS](/g37sys73ms-manual/web-application/attacks/client-side-attacks/xss/privilege-escalation-via-xss.md): https://shift8web.ca/2018/01/craft-xss-payload-create-admin-user-in-wordpress-user/
- [Server Side Attacks](/g37sys73ms-manual/web-application/attacks/server-side-attacks.md)
- [File Upload Vulnerabilities](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-upload-vulnerabilities.md)
- [Using Non-Executable Files](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-upload-vulnerabilities/using-non-executable-files.md)
- [SQL Injection](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection.md)
- [Easy Manual SQLi](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection/manual-sqli.md)
- [PostgreSQL](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection/manual-sqli/postgresql.md): CVE-2019–9193
- [Portswigger](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection/manual-sqli/portswigger.md): SQLi Cheat sheet
- [Testing SQLi](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection/manual-sqli/testing-sqli.md)
- [Code Exection](/g37sys73ms-manual/web-application/attacks/server-side-attacks/code-exection.md)
- [Command Execution](/g37sys73ms-manual/web-application/attacks/server-side-attacks/command-execution.md)
- [Directory Traversals](/g37sys73ms-manual/web-application/attacks/server-side-attacks/directory-traversals.md)
- [File Include Vulnerabilities](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-include-vulnerabilities.md)
- [Apache & PHP <3](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-include-vulnerabilities/apache-and-php-less-than-3.md)
- [PHP Filters](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-include-vulnerabilities/php-filters.md)
- [Server Side Request Forgery](/g37sys73ms-manual/web-application/attacks/server-side-attacks/server-side-request-forgery.md)
- [Server Side Template Injection](/g37sys73ms-manual/web-application/attacks/server-side-attacks/ssti.md): Tools which could be used is tplmap
- [LDAP](/g37sys73ms-manual/web-application/attacks/server-side-attacks/ldap.md)
- [MongoDB Injection](/g37sys73ms-manual/web-application/attacks/server-side-attacks/mongodb-injection.md)
- [XXE](/g37sys73ms-manual/web-application/attacks/server-side-attacks/xxe.md)
- [Web LLM attacks](/g37sys73ms-manual/web-application/attacks/web-llm-attacks.md)
- [Exploiting LLM APIs, functions, and plugins](/g37sys73ms-manual/web-application/attacks/web-llm-attacks/exploiting-llm-apis-functions-and-plugins.md)
- [WebSocket](/g37sys73ms-manual/web-application/attacks/websocket.md)
