# Server Side Attacks

- [File Upload Vulnerabilities](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-upload-vulnerabilities.md)
- [Using Non-Executable Files](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-upload-vulnerabilities/using-non-executable-files.md)
- [SQL Injection](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection.md)
- [Easy Manual SQLi](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection/manual-sqli.md)
- [PostgreSQL](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection/manual-sqli/postgresql.md): CVE-2019–9193
- [Portswigger](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection/manual-sqli/portswigger.md): SQLi Cheat sheet
- [Testing SQLi](/g37sys73ms-manual/web-application/attacks/server-side-attacks/sql-injection/manual-sqli/testing-sqli.md)
- [Code Exection](/g37sys73ms-manual/web-application/attacks/server-side-attacks/code-exection.md)
- [Command Execution](/g37sys73ms-manual/web-application/attacks/server-side-attacks/command-execution.md)
- [Directory Traversals](/g37sys73ms-manual/web-application/attacks/server-side-attacks/directory-traversals.md)
- [File Include Vulnerabilities](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-include-vulnerabilities.md)
- [Apache & PHP <3](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-include-vulnerabilities/apache-and-php-less-than-3.md)
- [PHP Filters](/g37sys73ms-manual/web-application/attacks/server-side-attacks/file-include-vulnerabilities/php-filters.md)
- [Server Side Request Forgery](/g37sys73ms-manual/web-application/attacks/server-side-attacks/server-side-request-forgery.md)
- [Server Side Template Injection](/g37sys73ms-manual/web-application/attacks/server-side-attacks/ssti.md): Tools which could be used is tplmap
- [LDAP](/g37sys73ms-manual/web-application/attacks/server-side-attacks/ldap.md)
- [MongoDB Injection](/g37sys73ms-manual/web-application/attacks/server-side-attacks/mongodb-injection.md)
- [XXE](/g37sys73ms-manual/web-application/attacks/server-side-attacks/xxe.md)
