ZAP Tutorial in Depth
ZAP Tutorial in Depth
Insufficient Authentication
Insufficient Authorization
Integer Overflows
Insufficient Transport Layer Protection
Remote File Inclusion
Format String
Buffer Overflow
Cross-site Scripting
Cross Site Request Forgery
Denial of Service
Brute Forcing Log-in Credentials
Brute Forcing Session Identifiers
Brute Forcing Directories and Files
Brute Forcing Credit Card Information
Content Spoofing
Information Leakage
Server Misconfiguration
Application Misconfiguration
Directory Indexing
Improper Filesystem Permissions
Credential and Session Prediction
SQL Injection
Improper Input Handling
Insufficient Anti automation
Improper Output Handling
XML Injection
HTTP Request Splitting
HTTP Response Splitting
HTTP Request Smuggling
HTTP Response Smuggling
Null Byte Injection
LDAP Injection
Mail Command Injection
OS Commanding
Routing Detour
Path Traversal
Predictable Resource Location
SOAP Array Abuse
SSI Injection
Session Fixation
URL Redirector Abuse
XPath Injection
Insufficient Process Validation
XML Attribute Blowup
Abuse of Functionality
XML External Entities
XML Entity Expansion
Fingerprinting
XQuery Injection
Insufficient Session Expiration
Insecure Indexing
Insufficient Password Recovery