Choose your vulnerability and start to learn.
It allows client-side code to be injected into web pages viewed by other users.
It is an attack technique used to attack database-based applications; where the attacker takes advantage of SQL language features and adds new SQL statements to the corresponding field on the standard application screen.
A type of access control vulnerability that occurs when an application uses user-supplied input to access objects directly.
A vulnerability that involves the execution of arbitrary commands in a host operating system (OS) resulting from insufficient input validation.
It is a type of attack against an application that parses XML inputs. This attack occurs when XML input containing a reference to an external entity is processed with an incompletely structured XML parser.
A vulnerability that allows an attacker to attach a remotely or locally hosted file, usually via a script on the web server.
It is a security vulnerability that occurs as a result of the inability to fully control the files received from the user and may result in remote code execution on the server.
Is an attack vector that tricks a web browser into executing an unwanted action in an application to which a user is logged in.
Insecure deserialization is a vulnerability which occurs when user-controllable untrusted data is deserialized by a website without sanitize.Vulnerability cause to gain priviliges may even remote code execution.
Broken authentication refers to the vulnerabilities or weaknesses inherent in an online platform or application that allows hackers to bypass the login security and gain access to all the privileges owned by the hacked user.
Race condition refers to a situation that can prevent a program from working correctly and cause security vulnerabilities. This occurs when two or more processes attempt to access the same resources at the same time, where this access occurs in a sequential or uncontrolled manner, which may result in unexpected errors or vulnerabilities.
Server-Side Template Injection (SSTI) is one of the vulnerabilities in web applications. This vulnerability could allow the malware to infect the server-side template engine and corrupt unwanted code by filling in the malware's lifetime throughout user input. These types of attacks manipulate the code inside the application, allowing sensitive information to be leaked or unwanted operations to occur on the system.
API hacking is a type of attack where malicious individuals or hackers attempt to gain unauthorized access to applications or systems through an API.
CAPTCHA bypass methods are techniques developed to circumvent security measures on websites. These methods typically aim to exploit computer programming and artificial intelligence techniques to allow non-human automated bots to solve or bypass CAPTCHA challenges. This facilitates activities such as spam submissions, account creation bots, and other automated malicious activities. However, such methods are considered unethical and illegal, and are constantly monitored by website owners for detection and mitigation.
Path traversal is a security vulnerability that allows attackers to access server files by exploiting security flaws in a web application. This creates the potential for accessing sensitive information, manipulating files, or causing damage to the system.
© Yavuzlar Web Security
