Race Condition Race conditions may occur when a process is critically or unexpectedly dependent on the sequence or timings of other events. In a web application environment, where multiple requ...
XSLT Injection
XSLT Injection Processing an unvalidated XSL stylesheet can allow an attacker to change the structure and contents of the resultant XML, include arbitrary files from the file system, or execute...
CSRF Injection
Cross-Site Request Forgery Cross-Site Request Forgery (CSRF/XSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated....
Subdomains Enumeration
Summary Enumerate all subdomains Subbrute KnockPy GoogleDorks EyeWitness Sublist3r Subfinder Findomain Aquatone (Ruby and Go versions) ...
OAuth
Summary Stealing OAuth Token via referer Grabbing OAuth Token via redirect_uri Executing XSS via redirect_uri OAuth private key disclosure Authorization Code Rule Violation Cross-Site...