blitzstrike 1.0.82 → 1.0.83

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (22) hide show
  1. package/CHANGELOG.md +22 -0
  2. package/README.md +24 -24
  3. package/THIRD-PARTY-NOTICES.md +1 -1
  4. package/docs/AUTONOMY.md +48 -136
  5. package/docs/usage.md +1 -1
  6. package/package.json +1 -1
  7. package/intelligence/ab_signals.json +0 -722
  8. package/intelligence/attack_chains.json +0 -666
  9. package/intelligence/awaiting_input_markers.json +0 -37
  10. package/intelligence/endpoint_patterns.json +0 -541
  11. package/intelligence/escalation_patterns.json +0 -224
  12. package/intelligence/file_extensions.json +0 -6
  13. package/intelligence/patterns.json +0 -437
  14. package/intelligence/refusal_markers.json +0 -35
  15. package/intelligence/scan_profiles.json +0 -40
  16. package/intelligence/skills.json +0 -1185
  17. package/intelligence/tools.json +0 -1292
  18. package/intelligence/tools_meta.json +0 -1247
  19. package/intelligence/unified_patterns.json +0 -2329
  20. package/intelligence/verification_patterns.json +0 -52
  21. package/intelligence/vuln_ontology.json +0 -189
  22. package/intelligence/waff_bypass.json +0 -677
package/intelligence/skills.json DELETED
@@ -1,1185 +0,0 @@
1
- {
2
- "skill_keywords": {
3
- "sql injection": "vulnerabilities/sql_injection.md",
4
- "sqli": "vulnerabilities/sql_injection.md",
5
- "xss": "vulnerabilities/xss.md",
6
- "cross-site scripting": "vulnerabilities/xss.md",
7
- "ssrf": "vulnerabilities/ssrf.md",
8
- "csrf": "vulnerabilities/csrf.md",
9
- "xxe": "vulnerabilities/xxe.md",
10
- "idor": "vulnerabilities/idor.md",
11
- "rce": "vulnerabilities/rce.md",
12
- "remote code execution": "vulnerabilities/rce.md",
13
- "lfi": "vulnerabilities/path_traversal.md",
14
- "rfi": "vulnerabilities/path_traversal.md",
15
- "path traversal": "vulnerabilities/path_traversal.md",
16
- "file upload": "vulnerabilities/insecure_file_uploads.md",
17
- "open redirect": "vulnerabilities/open_redirect.md",
18
- "subdomain takeover": "vulnerabilities/subdomain_takeover.md",
19
- "jwt": "vulnerabilities/jwt_attacks.md",
20
- "api": "vulnerabilities/api_testing.md",
21
- "graphql": "protocols/graphql.md",
22
- "active directory": "protocols/active_directory.md",
23
- "cloud": "technologies/cloud_security.md",
24
- "aws": "technologies/cloud_security.md",
25
- "firebase": "technologies/firebase_firestore.md",
26
- "supabase": "technologies/supabase.md",
27
- "mobile pentest": "technologies/mobile_app_pentesting.md",
28
- "mobile app pentest": "technologies/mobile_app_pentesting.md",
29
- "android pentest": "technologies/mobile_app_pentesting.md",
30
- "ios pentest": "technologies/mobile_app_pentesting.md",
31
- "android apk": "technologies/mobile_app_pentesting.md",
32
- "ios ipa": "technologies/mobile_app_pentesting.md",
33
- ".apk": "technologies/mobile_app_pentesting.md",
34
- "apk file": "technologies/mobile_app_pentesting.md",
35
- ".ipa": "technologies/mobile_app_pentesting.md",
36
- "ipa file": "technologies/mobile_app_pentesting.md",
37
- "frida": "technologies/frida_hooking.md",
38
- "objection": "technologies/mobile_app_pentesting.md",
39
- "jadx": "technologies/mobile_app_pentesting.md",
40
- "apktool": "technologies/mobile_app_pentesting.md",
41
- "mobsf": "technologies/mobile_app_pentesting.md",
42
- "race condition": "vulnerabilities/race_conditions.md",
43
- "toctou": "vulnerabilities/race_conditions.md",
44
- "time of check": "vulnerabilities/race_conditions.md",
45
- "double spend": "vulnerabilities/race_conditions.md",
46
- "double redeem": "vulnerabilities/race_conditions.md",
47
- "double refund": "vulnerabilities/race_conditions.md",
48
- "concurrent request": "vulnerabilities/race_conditions.md",
49
- "parallel request": "vulnerabilities/race_conditions.md",
50
- "turbo intruder": "vulnerabilities/race_conditions.md",
51
- "last-byte sync": "vulnerabilities/race_conditions.md",
52
- "single-packet attack": "vulnerabilities/race_conditions.md",
53
- "http2 race": "vulnerabilities/race_conditions.md",
54
- "race_http2": "vulnerabilities/race_conditions.md",
55
- "prototype pollution": "frameworks/express.md",
56
- "web cache": "vulnerabilities/web_cache_poisoning.md",
57
- "cache poisoning": "technologies/memcached.md",
58
- "privilege escalation": "vulnerabilities/privilege_escalation.md",
59
- "mass assignment": "vulnerabilities/mass_assignment.md",
60
- "quota bypass": "vulnerabilities/mass_assignment.md",
61
- "information disclosure": "vulnerabilities/information_disclosure.md",
62
- "tls": "reconnaissance/full_recon.md",
63
- "ssl": "reconnaissance/full_recon.md",
64
- "dns": "protocols/dns.md",
65
- "javascript recon": "reconnaissance/javascript_analysis.md",
66
- "js recon": "reconnaissance/javascript_analysis.md",
67
- "js analysis": "reconnaissance/javascript_analysis.md",
68
- "javascript analysis": "reconnaissance/javascript_analysis.md",
69
- "js endpoint": "reconnaissance/javascript_analysis.md",
70
- "javascript endpoint": "reconnaissance/javascript_analysis.md",
71
- "js bundle": "reconnaissance/javascript_analysis.md",
72
- "webpack": "reconnaissance/javascript_analysis.md",
73
- "spa recon": "reconnaissance/javascript_analysis.md",
74
- "react app": "reconnaissance/javascript_analysis.md",
75
- "vue app": "reconnaissance/javascript_analysis.md",
76
- "angular app": "reconnaissance/javascript_analysis.md",
77
- "linkfinder": "reconnaissance/javascript_analysis.md",
78
- "getjs": "reconnaissance/javascript_analysis.md",
79
- "js files": "reconnaissance/javascript_analysis.md",
80
- "source map": "vulnerabilities/information_disclosure.md",
81
- "nextjs": "frameworks/nextjs.md",
82
- "fastapi": "frameworks/fastapi.md",
83
- "exploitation": "vulnerabilities/exploitation.md",
84
- "full recon": "reconnaissance/full_recon.md",
85
- "deep recon": "reconnaissance/full_recon.md",
86
- "comprehensive": "reconnaissance/full_recon.md",
87
- "pentest": "reconnaissance/full_recon.md",
88
- "penetration test": "reconnaissance/full_recon.md",
89
- "bug bounty": "reconnaissance/full_recon.md",
90
- "ssti": "vulnerabilities/ssti.md",
91
- "server-side template injection": "vulnerabilities/ssti.md",
92
- "template injection": "vulnerabilities/ssti.md",
93
- "http smuggling": "vulnerabilities/http_smuggling.md",
94
- "request smuggling": "vulnerabilities/http_smuggling.md",
95
- "oauth": "vulnerabilities/oauth_misconfig.md",
96
- "saml": "vulnerabilities/oauth_saml.md",
97
- "websocket": "vulnerabilities/websocket.md",
98
- "ws": "vulnerabilities/websocket.md",
99
- "kubernetes": "technologies/kubernetes_pentest.md",
100
- "k8s": "technologies/kubernetes_pentest.md",
101
- "grpc": "vulnerabilities/grpc.md",
102
- "supply chain": "vulnerabilities/supply_chain.md",
103
- "ci/cd": "technologies/cicd_attacks.md",
104
- "waf": "vulnerabilities/waf_detection.md",
105
- "waf detection": "vulnerabilities/waf_detection.md",
106
- "bypass waf": "vulnerabilities/waf_detection.md",
107
- "ctf": "reconnaissance/ctf_methodology.md",
108
- "flag": "reconnaissance/ctf_methodology.md",
109
- "flag{": "reconnaissance/ctf_methodology.md",
110
- "capture the flag": "reconnaissance/ctf_methodology.md",
111
- "reverse engineering": "ctf/reversing.md",
112
- "reversing": "ctf/reversing.md",
113
- "binary reversing": "ctf/reversing.md",
114
- "disassembly": "ctf/reversing.md",
115
- "decompile": "ctf/reversing.md",
116
- "objdump": "ctf/reversing.md",
117
- "radare2": "ctf/reversing.md",
118
- "r2": "ctf/reversing.md",
119
- "ghidra": "ctf/reversing.md",
120
- "pwn": "ctf/pwn.md",
121
- "pwntools": "ctf/pwn.md",
122
- "binary exploitation": "ctf/pwn.md",
123
- "rop": "ctf/pwn.md",
124
- "ret2libc": "ctf/pwn/rop-and-shellcode.md",
125
- "format string": "ctf/pwn.md",
126
- "heap exploitation": "ctf/heap_advanced.md",
127
- "stack overflow": "ctf/pwn.md",
128
- "checksec": "ctf/pwn.md",
129
- "osint": "reconnaissance/asn_whois_osint.md",
130
- "asn": "reconnaissance/asn_whois_osint.md",
131
- "whois": "reconnaissance/asn_whois_osint.md",
132
- "certificate transparency": "reconnaissance/subdomain_enum.md",
133
- "challenge": "reconnaissance/ctf_methodology.md",
134
- "xbow": "reconnaissance/ctf_methodology.md",
135
- "benchmark": "reconnaissance/ctf_methodology.md",
136
- "localhost:": "reconnaissance/ctf_methodology.md",
137
- "127.0.0.1": "reconnaissance/ctf_methodology.md",
138
- "internal": "reconnaissance/internal_pentest.md",
139
- "internal pentest": "reconnaissance/internal_pentest.md",
140
- "local pentest": "reconnaissance/internal_pentest.md",
141
- "network pentest": "reconnaissance/internal_pentest.md",
142
- "192.168": "reconnaissance/internal_pentest.md",
143
- "10.0.0": "reconnaissance/internal_pentest.md",
144
- "172.16": "reconnaissance/internal_pentest.md",
145
- "smb": "protocols/smb.md",
146
- "lateral movement": "postexploit/lateral_movement.md",
147
- "privesc": "reconnaissance/internal_pentest.md",
148
- "privilege esc": "reconnaissance/internal_pentest.md",
149
- "gcp": "technologies/cloud_security.md",
150
- "azure": "technologies/cloud_security.md",
151
- "s3": "technologies/cloud_security.md",
152
- "ec2": "technologies/cloud_security.md",
153
- "iam": "technologies/cloud_security.md",
154
- "lambda": "technologies/cloud_security.md",
155
- "metadata": "technologies/cloud_security.md",
156
- "xss payload": "payloads/xss.md",
157
- "xss polyglot": "payloads/xss.md",
158
- "sql injection payload": "payloads/sqli.md",
159
- "sqli payload": "payloads/sqli.md",
160
- "ssrf payload": "payloads/ssrf.md",
161
- "xxe payload": "payloads/xxe.md",
162
- "browser_action": "tools/browser_automation.md",
163
- "browser automation": "tools/browser_automation.md",
164
- "headless browser": "tools/browser_automation.md",
165
- "chromium": "tools/browser_automation.md",
166
- "xss verification": "tools/browser_automation.md",
167
- "quick_fuzz": "tools/advanced_fuzzing.md",
168
- "advanced_fuzz": "tools/advanced_fuzzing.md",
169
- "deep_fuzz": "tools/advanced_fuzzing.md",
170
- "schemathesis_fuzz": "tools/advanced_fuzzing.md",
171
- "generate_wordlist": "tools/advanced_fuzzing.md",
172
- "http_observe": "tools/scripting.md",
173
- "execute": "tools/scripting.md",
174
- "python_session": "tools/scripting.md",
175
- "edit_file": "tools/scripting.md",
176
- "create_file": "tools/scripting.md",
177
- "read_file": "tools/scripting.md",
178
- "list_files": "tools/scripting.md",
179
- "code_analysis": "tools/source_audit.md",
180
- "record_hypothesis": "tools/reporting.md",
181
- "create_note": "tools/reporting.md",
182
- "list_notes": "tools/reporting.md",
183
- "search_notes": "tools/reporting.md",
184
- "read_note": "tools/reporting.md",
185
- "export_notes_wiki": "tools/reporting.md",
186
- "create_vulnerability_report": "tools/reporting.md",
187
- "js secret": "vulnerabilities/information_disclosure.md",
188
- "js extractor": "reconnaissance/javascript_analysis.md",
189
- "secret extractor": "reconnaissance/javascript_analysis.md",
190
- "javascript secret": "vulnerabilities/information_disclosure.md",
191
- "js recon script": "reconnaissance/javascript_analysis.md",
192
- "idor scanner": "tools/scripting.md",
193
- "idor script": "vulnerabilities/idor.md",
194
- "sequential scan": "tools/scripting.md",
195
- "subdomain takeover script": "tools/scripting.md",
196
- "takeover checker": "tools/scripting.md",
197
- "ssti exploit": "tools/scripting.md",
198
- "ssti script": "tools/scripting.md",
199
- "template engine": "tools/scripting.md",
200
- "blind sqli extractor": "tools/scripting.md",
201
- "sqli extractor": "tools/scripting.md",
202
- "boolean blind": "tools/scripting.md",
203
- "bit extractor": "tools/scripting.md",
204
- "http smuggling script": "tools/scripting.md",
205
- "smuggling probe": "tools/scripting.md",
206
- "cl.te": "tools/scripting.md",
207
- "te.cl": "tools/scripting.md",
208
- "graphql batch": "tools/scripting.md",
209
- "alias batch": "tools/scripting.md",
210
- "graphql brute": "tools/scripting.md",
211
- "jwt attack": "vulnerabilities/jwt_attacks.md",
212
- "jwt suite": "tools/scripting.md",
213
- "alg none": "vulnerabilities/jwt_attacks.md",
214
- "algorithm confusion": "vulnerabilities/jwt_attacks.md",
215
- "prototype pollution script": "tools/scripting.md",
216
- "broken access control script": "tools/scripting.md",
217
- "origin ip": "tools/scripting.md",
218
- "cloudflare bypass": "tools/scripting.md",
219
- "websocket fuzz": "tools/scripting.md",
220
- "cors exploit": "tools/scripting.md",
221
- "oauth script": "tools/scripting.md",
222
- "blind ssrf": "tools/scripting.md",
223
- "ssrf interactsh": "tools/scripting.md",
224
- "ssrf oob": "tools/scripting.md",
225
- "ssrf cloud": "tools/scripting.md",
226
- "ssrf aws": "tools/scripting.md",
227
- "ssrf metadata": "tools/scripting.md",
228
- "ssrf credential": "tools/scripting.md",
229
- "imds": "tools/scripting.md",
230
- "cache poison script": "tools/scripting.md",
231
- "cache prober": "tools/scripting.md",
232
- "web cache script": "tools/scripting.md",
233
- "x-forwarded-host": "vulnerabilities/host_header_injection.md",
234
- "unkeyed header": "tools/scripting.md",
235
- "fat get": "tools/scripting.md",
236
- "cache buster": "tools/scripting.md",
237
- "pkce bypass": "vulnerabilities/oauth_misconfig.md",
238
- "pkce downgrade": "tools/scripting.md",
239
- "token reuse": "tools/scripting.md",
240
- "code reuse": "tools/scripting.md",
241
- "state fixation": "tools/scripting.md",
242
- "redirect uri bypass": "vulnerabilities/oauth_misconfig.md",
243
- "oauth advanced": "tools/scripting.md",
244
- "authorization code": "tools/scripting.md",
245
- "fuzzing": "tools/advanced_fuzzing.md",
246
- "zero-day": "tools/advanced_fuzzing.md",
247
- "nmap": "tools/nmap.md",
248
- "naabu": "tools/nmap.md",
249
- "port scan": "tools/nmap.md",
250
- "port scanning": "tools/nmap.md",
251
- "masscan": "tools/nmap.md",
252
- "nuclei": "tools/nuclei.md",
253
- "nuclei scan": "tools/nuclei.md",
254
- "nuclei template": "tools/nuclei.md",
255
- "semgrep": "tools/semgrep.md",
256
- "sast": "tools/source_audit.md",
257
- "static analysis": "tools/source_audit.md",
258
- "source code analysis": "tools/semgrep.md",
259
- "code review": "tools/code_review.md",
260
- "review code": "tools/code_review.md",
261
- "security code review": "tools/code_review.md",
262
- "pull request review": "tools/code_review.md",
263
- "pr review": "tools/code_review.md",
264
- "diff review": "tools/code_review.md",
265
- "audit code": "tools/code_review.md",
266
- "review this file": "tools/code_review.md",
267
- "caido": "tools/caido.md",
268
- "caido-cli": "tools/caido.md",
269
- "caido-setup": "tools/caido.md",
270
- "caido_set_scope": "tools/caido.md",
271
- "caido_sitemap": "tools/caido.md",
272
- "caido_list_requests": "tools/caido.md",
273
- "caido_send_request": "tools/caido.md",
274
- "caido_automate": "tools/caido.md",
275
- "caido_get_findings": "tools/caido.md",
276
- "caido_intercept": "tools/caido.md",
277
- "web proxy": "tools/caido.md",
278
- "intercept": "tools/caido.md",
279
- "replay request": "tools/caido.md",
280
- "automate": "tools/caido.md",
281
- "dalfox": "tools/dalfox.md",
282
- "xss scanner": "tools/dalfox.md",
283
- "xss scan": "tools/dalfox.md",
284
- "dom xss": "vulnerabilities/dom_based_vulnerabilities.md",
285
- "blind xss": "vulnerabilities/blind_xss.md",
286
- "reflected xss": "tools/dalfox.md",
287
- "sqlmap": "tools/sqlmap.md",
288
- "ghauri": "tools/sqlmap.md",
289
- "sql injection scanner": "tools/sqlmap.md",
290
- "arjun": "vulnerabilities/sql_injection.md",
291
- "x8": "vulnerabilities/sql_injection.md",
292
- "parameter discovery": "vulnerabilities/sql_injection.md",
293
- "hidden parameter": "vulnerabilities/sql_injection.md",
294
- "parameter pollution": "payloads/http_parameter_pollution.md",
295
- "expert testing": "tools/advanced_fuzzing.md",
296
- "creative exploit": "tools/advanced_fuzzing.md",
297
- "bypass": "tools/advanced_fuzzing.md",
298
- "waf bypass": "tools/advanced_fuzzing.md",
299
- "command injection": "payloads/command_injection.md",
300
- "command injection payload": "payloads/command_injection.md",
301
- "os command": "payloads/command_injection.md",
302
- "cmdi": "payloads/command_injection.md",
303
- "rce payload": "payloads/command_injection.md",
304
- "shell injection": "payloads/command_injection.md",
305
- "lfi payload": "payloads/lfi.md",
306
- "local file inclusion payload": "payloads/lfi.md",
307
- "directory traversal payload": "payloads/lfi.md",
308
- "file read payload": "payloads/lfi.md",
309
- "ssti payload": "payloads/ssti.md",
310
- "template injection payload": "payloads/ssti.md",
311
- "jinja2": "payloads/ssti.md",
312
- "twig": "payloads/ssti.md",
313
- "freemarker": "payloads/ssti.md",
314
- "pebble": "payloads/ssti.md",
315
- "velocity template": "payloads/ssti.md",
316
- "install tool": "tools/install.md",
317
- "install missing": "tools/install.md",
318
- "tool not found": "tools/install.md",
319
- "apt install": "tools/install.md",
320
- "go install": "tools/install.md",
321
- "pip install": "tools/install.md",
322
- "tool catalog": "tools/tool_catalog.md",
323
- "available tools": "tools/tool_catalog.md",
324
- "what tools": "tools/tool_catalog.md",
325
- "which tool": "tools/tool_catalog.md",
326
- "tool list": "tools/tool_catalog.md",
327
- "tools available": "tools/tool_catalog.md",
328
- "broken function level": "vulnerabilities/bfla.md",
329
- "bfla": "vulnerabilities/bfla.md",
330
- "function level authorization": "vulnerabilities/bfla.md",
331
- "admin function": "vulnerabilities/bfla.md",
332
- "unauthorized function": "vulnerabilities/bfla.md",
333
- "role bypass": "vulnerabilities/bfla.md",
334
- "endpoint authorization": "vulnerabilities/bfla.md",
335
- "django": "frameworks/django.md",
336
- "django admin": "frameworks/django.md",
337
- "django debug": "frameworks/django.md",
338
- "drf": "frameworks/django.md",
339
- "django rest framework": "frameworks/django.md",
340
- "laravel": "frameworks/laravel.md",
341
- "ignition": "frameworks/laravel.md",
342
- "telescope": "frameworks/laravel.md",
343
- "laravel debug": "frameworks/laravel.md",
344
- "app key": "frameworks/laravel.md",
345
- "spring": "frameworks/spring.md",
346
- "spring boot": "frameworks/spring.md",
347
- "spring4shell": "vulnerabilities/spring4shell.md",
348
- "actuator": "frameworks/spring.md",
349
- "spring actuator": "vulnerabilities/information_disclosure.md",
350
- "heapdump": "frameworks/spring.md",
351
- "thymeleaf": "frameworks/spring.md",
352
- "rails": "frameworks/rails.md",
353
- "ruby on rails": "frameworks/rails.md",
354
- "sidekiq": "frameworks/rails.md",
355
- "devise": "frameworks/rails.md",
356
- "active record": "frameworks/rails.md",
357
- "express": "frameworks/express.md",
358
- "express.js": "frameworks/express.md",
359
- "expressjs": "frameworks/express.md",
360
- "node.js": "frameworks/express.md",
361
- "nodejs": "frameworks/express.md",
362
- "nosql injection": "vulnerabilities/nosql_injection.md",
363
- "ldap": "protocols/ldap.md",
364
- "ldap injection": "payloads/ldap_injection.md",
365
- "ldap enumeration": "protocols/ldap.md",
366
- "anonymous bind": "protocols/ldap.md",
367
- "directory service": "protocols/ldap.md",
368
- "smtp": "protocols/smtp_imap.md",
369
- "imap": "protocols/smtp_imap.md",
370
- "email": "protocols/smtp_imap.md",
371
- "mail server": "protocols/smtp_imap.md",
372
- "open relay": "protocols/smtp_imap.md",
373
- "email injection": "protocols/smtp_imap.md",
374
- "header injection": "vulnerabilities/crlf_injection.md",
375
- "smtp enumeration": "protocols/smtp_imap.md",
376
- "nginx": "technologies/nginx_apache.md",
377
- "apache": "technologies/nginx_apache.md",
378
- "web server": "technologies/nginx_apache.md",
379
- "nginx misconfiguration": "technologies/nginx_apache.md",
380
- "alias traversal": "technologies/nginx_apache.md",
381
- "server-status": "technologies/nginx_apache.md",
382
- "directory listing": "technologies/nginx_apache.md",
383
- "elasticsearch": "technologies/elasticsearch.md",
384
- "elastic": "technologies/elasticsearch.md",
385
- "kibana": "technologies/elasticsearch.md",
386
- "es index": "technologies/elasticsearch.md",
387
- "redis": "technologies/redis.md",
388
- "redis rce": "vulnerabilities/nosql_injection.md",
389
- "redis cron": "technologies/redis.md",
390
- "redis ssh": "technologies/redis.md",
391
- "mongodb": "technologies/mongodb.md",
392
- "mongo": "technologies/mongodb.md",
393
- "mongoose": "technologies/mongodb.md",
394
- "mongodb injection": "vulnerabilities/nosql_injection.md",
395
- "docker": "technologies/docker_container.md",
396
- "container": "technologies/docker_container.md",
397
- "container escape": "postexploit/container_escape.md",
398
- "docker api": "technologies/docker_container.md",
399
- "kubectl": "technologies/docker_container.md",
400
- "kubelet": "technologies/kubernetes_pentest.md",
401
- "privileged container": "postexploit/container_escape.md",
402
- "wordpress": "frameworks/wordpress.md",
403
- "wpscan": "frameworks/wordpress.md",
404
- "wp-admin": "frameworks/wordpress.md",
405
- "xmlrpc": "frameworks/wordpress.md",
406
- "wp-login": "frameworks/wordpress.md",
407
- "woocommerce": "frameworks/wordpress.md",
408
- "wp plugin": "frameworks/wordpress.md",
409
- "flask": "frameworks/flask.md",
410
- "werkzeug": "frameworks/flask.md",
411
- "flask debug": "frameworks/flask.md",
412
- "flask secret key": "frameworks/flask.md",
413
- "flask session": "frameworks/flask.md",
414
- "flask-unsign": "frameworks/flask.md",
415
- "dotnet": "frameworks/dotnet.md",
416
- "asp.net": "frameworks/dotnet.md",
417
- "aspnet": "frameworks/dotnet.md",
418
- ".net": "frameworks/dotnet.md",
419
- "viewstate": "frameworks/dotnet.md",
420
- "elmah": "frameworks/dotnet.md",
421
- "iis": "frameworks/dotnet.md",
422
- "razor": "frameworks/dotnet.md",
423
- "machinekey": "frameworks/dotnet.md",
424
- "telerik": "frameworks/dotnet.md",
425
- "ysoserial": "frameworks/dotnet.md",
426
- "php": "frameworks/php.md",
427
- "phpinfo": "vulnerabilities/information_disclosure.md",
428
- "type juggling": "frameworks/php.md",
429
- "magic hash": "frameworks/php.md",
430
- "phar": "frameworks/php.md",
431
- "php filter chain": "frameworks/php.md",
432
- "cors": "vulnerabilities/cors.md",
433
- "cors misconfiguration": "vulnerabilities/cors.md",
434
- "cors bypass": "vulnerabilities/cors.md",
435
- "origin reflection": "vulnerabilities/cors.md",
436
- "access-control-allow-origin": "vulnerabilities/cors.md",
437
- "null origin": "vulnerabilities/cors.md",
438
- "cross-origin": "vulnerabilities/cors.md",
439
- "jenkins": "technologies/jenkins.md",
440
- "script console": "technologies/jenkins.md",
441
- "jenkinsfile": "technologies/jenkins.md",
442
- "jenkins pipeline": "technologies/jenkins.md",
443
- "jenkins credential": "technologies/jenkins.md",
444
- "tomcat": "technologies/tomcat.md",
445
- "apache tomcat": "technologies/tomcat.md",
446
- "war upload": "technologies/tomcat.md",
447
- "ghostcat": "technologies/tomcat.md",
448
- "ajp": "technologies/tomcat.md",
449
- "struts": "technologies/tomcat.md",
450
- "ognl": "technologies/tomcat.md",
451
- "memcached": "technologies/memcached.md",
452
- "memcache": "technologies/memcached.md",
453
- "gitlab": "technologies/gitlab_github.md",
454
- "github enterprise": "technologies/gitlab_github.md",
455
- "pipeline injection": "technologies/gitlab_github.md",
456
- "github actions": "technologies/cicd_attacks.md",
457
- "gitlab ci": "technologies/cicd_attacks.md",
458
- "trufflehog": "technologies/gitlab_github.md",
459
- "gitleaks": "technologies/gitlab_github.md",
460
- "git secret": "technologies/gitlab_github.md",
461
- "ssh": "protocols/ssh.md",
462
- "ssh brute": "protocols/ssh.md",
463
- "ssh key": "protocols/ssh.md",
464
- "ssh tunnel": "protocols/ssh.md",
465
- "ssh pivot": "protocols/ssh.md",
466
- "socks proxy": "postexploit/pivoting.md",
467
- "authorized keys": "protocols/ssh.md",
468
- "openssh": "protocols/ssh.md",
469
- "ssh enumeration": "protocols/ssh.md",
470
- "cidr": "reconnaissance/asn_whois_osint.md",
471
- "bgp": "reconnaissance/asn_whois_osint.md",
472
- "ip range": "reconnaissance/asn_whois_osint.md",
473
- "asnmap": "reconnaissance/asn_whois_osint.md",
474
- "nrich": "reconnaissance/asn_whois_osint.md",
475
- "mapcidr": "reconnaissance/asn_whois_osint.md",
476
- "subfinder": "reconnaissance/subdomain_enum.md",
477
- "amass": "reconnaissance/subdomain_enum.md",
478
- "ip enrichment": "reconnaissance/asn_whois_osint.md",
479
- "reverse whois": "reconnaissance/asn_whois_osint.md",
480
- "infrastructure mapping": "reconnaissance/asn_whois_osint.md",
481
- "passive recon": "reconnaissance/shodan_censys.md",
482
- "crt.sh": "reconnaissance/subdomain_enum.md",
483
- "dork": "reconnaissance/dorking.md",
484
- "dorking": "reconnaissance/dorking.md",
485
- "google dork": "reconnaissance/dorking.md",
486
- "shodan": "reconnaissance/dorking.md",
487
- "censys": "reconnaissance/shodan_censys.md",
488
- "fofa": "reconnaissance/shodan_censys.md",
489
- "site:": "reconnaissance/dorking.md",
490
- "filetype:": "reconnaissance/dorking.md",
491
- "inurl:": "reconnaissance/dorking.md",
492
- "ctf crypto": "ctf/crypto.md",
493
- "rsa attack": "ctf/crypto.md",
494
- "aes ecb": "ctf/crypto/modern-ciphers.md",
495
- "padding oracle": "ctf/crypto/modern-ciphers.md",
496
- "hash length extension": "ctf/crypto.md",
497
- "xor cipher": "ctf/crypto.md",
498
- "rsactftool": "ctf/crypto.md",
499
- "ctf pwn": "ctf/pwn.md",
500
- "buffer overflow": "ctf/pwn.md",
501
- "bof": "ctf/pwn.md",
502
- "rop chain": "ctf/pwn.md",
503
- "ctf forensics": "ctf/forensics.md",
504
- "steganography": "ctf/forensics.md",
505
- "stego": "ctf/forensics.md",
506
- "binwalk": "ctf/forensics.md",
507
- "foremost": "ctf/forensics.md",
508
- "volatility": "ctf/forensics.md",
509
- "memory forensics": "ctf/forensics.md",
510
- "pcap analysis": "ctf/forensics/network.md",
511
- "steghide": "ctf/forensics.md",
512
- "zsteg": "ctf/forensics.md",
513
- "ctf reversing": "ctf/reversing.md",
514
- "ltrace": "ctf/reversing.md",
515
- "strace": "ctf/reversing.md",
516
- "binary patching": "ctf/reversing.md",
517
- "netbios": "protocols/smb.md",
518
- "smbclient": "protocols/smb.md",
519
- "enum4linux": "protocols/smb.md",
520
- "eternalblue": "protocols/smb.md",
521
- "ms17-010": "protocols/smb.md",
522
- "pass the hash": "postexploit/ad_credential_attacks.md",
523
- "ntlm relay": "postexploit/ad_credential_attacks.md",
524
- "crackmapexec": "postexploit/netexec_workflow.md",
525
- "ftp": "protocols/ftp.md",
526
- "anonymous ftp": "protocols/ftp.md",
527
- "vsftpd": "protocols/ftp.md",
528
- "ftp brute": "protocols/ftp.md",
529
- "snmp": "protocols/snmp.md",
530
- "community string": "protocols/snmp.md",
531
- "mib walk": "protocols/snmp.md",
532
- "snmpwalk": "protocols/snmp.md",
533
- "onesixtyone": "protocols/snmp.md",
534
- "zone transfer": "protocols/dns.md",
535
- "axfr": "protocols/dns.md",
536
- "dns brute": "reconnaissance/subdomain_enum.md",
537
- "dnsrecon": "protocols/dns.md",
538
- "dnsenum": "protocols/dns.md",
539
- "dns tunneling": "protocols/dns.md",
540
- "kerberos": "protocols/kerberos.md",
541
- "kerberoasting": "protocols/kerberos.md",
542
- "as-rep roasting": "protocols/kerberos.md",
543
- "golden ticket": "protocols/kerberos.md",
544
- "silver ticket": "protocols/kerberos.md",
545
- "kerbrute": "protocols/kerberos.md",
546
- "pass the ticket": "protocols/kerberos.md",
547
- "rdp": "protocols/rdp.md",
548
- "bluekeep": "protocols/rdp.md",
549
- "cve-2019-0708": "protocols/rdp.md",
550
- "xfreerdp": "protocols/rdp.md",
551
- "linux privesc": "postexploit/linux_privesc.md",
552
- "linux privilege escalation": "postexploit/linux_privesc.md",
553
- "suid": "postexploit/linux_privesc.md",
554
- "sudo abuse": "postexploit/linux_privesc.md",
555
- "linpeas": "postexploit/linux_privesc.md",
556
- "cron job": "postexploit/linux_privesc.md",
557
- "capabilities": "postexploit/linux_privesc.md",
558
- "path hijacking": "postexploit/linux_privesc.md",
559
- "dirtypipe": "postexploit/linux_privesc.md",
560
- "pwnkit": "postexploit/linux_privesc.md",
561
- "windows privesc": "postexploit/windows_privesc.md",
562
- "windows privilege escalation": "postexploit/windows_privesc.md",
563
- "seimpersonateprivilege": "postexploit/windows_privesc.md",
564
- "alwaysinstallelevated": "postexploit/windows_privesc.md",
565
- "unquoted service path": "postexploit/windows_privesc.md",
566
- "winpeas": "postexploit/windows_privesc.md",
567
- "godpotato": "postexploit/windows_privesc.md",
568
- "printspoofer": "postexploit/windows_privesc.md",
569
- "token impersonation": "postexploit/windows_privesc.md",
570
- "pass-the-hash": "postexploit/lateral_movement.md",
571
- "psexec": "postexploit/lateral_movement.md",
572
- "wmiexec": "postexploit/lateral_movement.md",
573
- "evil-winrm": "postexploit/lateral_movement.md",
574
- "secretsdump": "postexploit/credential_dumping.md",
575
- "pivoting": "postexploit/pivoting.md",
576
- "chisel": "postexploit/pivoting.md",
577
- "ligolo": "postexploit/pivoting.md",
578
- "proxychains": "postexploit/pivoting.md",
579
- "socat tunnel": "postexploit/pivoting.md",
580
- "port forward": "postexploit/pivoting.md",
581
- "nosqli": "vulnerabilities/nosql_injection.md",
582
- "operator injection": "vulnerabilities/nosql_injection.md",
583
- "host header injection": "vulnerabilities/host_header_injection.md",
584
- "password reset poisoning": "vulnerabilities/password_reset_poisoning.md",
585
- "vhost": "vulnerabilities/host_header_injection.md",
586
- "crlf injection": "vulnerabilities/crlf_injection.md",
587
- "response splitting": "vulnerabilities/crlf_injection.md",
588
- "crlfuzz": "vulnerabilities/crlf_injection.md",
589
- "2fa bypass": "vulnerabilities/2fa_bypass.md",
590
- "mfa bypass": "vulnerabilities/2fa_bypass.md",
591
- "otp brute": "vulnerabilities/2fa_bypass.md",
592
- "two factor": "vulnerabilities/2fa_bypass.md",
593
- "account takeover": "vulnerabilities/account_takeover.md",
594
- "ato": "vulnerabilities/account_takeover.md",
595
- "reset token": "vulnerabilities/account_takeover.md",
596
- "oauth takeover": "vulnerabilities/account_takeover.md",
597
- "metasploit": "tools/metasploit.md",
598
- "msfconsole": "tools/metasploit.md",
599
- "msfvenom": "tools/metasploit.md",
600
- "meterpreter": "tools/metasploit.md",
601
- "msf": "tools/metasploit.md",
602
- "hashcat": "tools/hashcat_john.md",
603
- "john the ripper": "tools/hashcat_john.md",
604
- "password cracking": "tools/hashcat_john.md",
605
- "hash cracking": "tools/hashcat_john.md",
606
- "ntlm crack": "tools/hashcat_john.md",
607
- "rockyou": "tools/hashcat_john.md",
608
- "impacket": "tools/impacket.md",
609
- "getuserspns": "tools/impacket.md",
610
- "getnpusers": "tools/impacket.md",
611
- "ntlmrelayx": "tools/impacket.md",
612
- "ticketer": "tools/impacket.md",
613
- "find bug": "tools/source_audit.md",
614
- "find bugs": "tools/source_audit.md",
615
- "source audit": "tools/source_audit.md",
616
- "code audit": "tools/source_audit.md",
617
- "audit source": "tools/source_audit.md",
618
- "bandit": "tools/source_audit.md",
619
- "gosec": "tools/source_audit.md",
620
- "brakeman": "tools/source_audit.md",
621
- "review source": "tools/source_audit.md",
622
- "analyze source": "tools/source_audit.md",
623
- "find vulnerability": "tools/source_audit.md",
624
- "find vulnerabilities": "tools/source_audit.md",
625
- "bug hunting": "tools/source_audit.md",
626
- "security review": "tools/source_audit.md",
627
- "drupal": "technologies/nginx_apache.md",
628
- "joomla": "technologies/nginx_apache.md",
629
- "magento": "vulnerabilities/sql_injection.md",
630
- "grafana": "technologies/cloud_security.md",
631
- "prometheus": "technologies/cloud_security.md",
632
- "zabbix": "technologies/cloud_security.md",
633
- "jupyter": "technologies/cloud_security.md",
634
- "weblogic": "technologies/tomcat.md",
635
- "jboss": "technologies/tomcat.md",
636
- "glassfish": "technologies/tomcat.md",
637
- "wildfly": "technologies/tomcat.md",
638
- "websphere": "technologies/tomcat.md",
639
- "openid": "vulnerabilities/oauth_saml.md",
640
- "rest api": "vulnerabilities/api_testing.md",
641
- "rest-api": "vulnerabilities/api_testing.md",
642
- "soap": "vulnerabilities/xxe.md",
643
- "rabbitmq": "technologies/memcached.md",
644
- "kafka": "technologies/cloud_security.md",
645
- "zookeeper": "technologies/cloud_security.md",
646
- "consul": "technologies/cloud_security.md",
647
- "etcd": "technologies/kubernetes_pentest.md",
648
- "vault": "technologies/cloud_security.md",
649
- "cassandra": "vulnerabilities/nosql_injection.md",
650
- "solr": "technologies/elasticsearch.md",
651
- "couchdb": "vulnerabilities/nosql_injection.md",
652
- "neo4j": "vulnerabilities/nosql_injection.md",
653
- "vmware": "technologies/cloud_security.md",
654
- "openstack": "technologies/cloud_security.md",
655
- "nextcloud": "technologies/cloud_security.md",
656
- "owncloud": "technologies/cloud_security.md",
657
- "moodle": "technologies/nginx_apache.md",
658
- "node": "frameworks/express.md",
659
- "next.js": "frameworks/nextjs.md",
660
- "react": "vulnerabilities/xss.md",
661
- "angular": "vulnerabilities/xss.md",
662
- "vue": "vulnerabilities/xss.md",
663
- "wp": "frameworks/wordpress.md",
664
- "drupal cms": "technologies/nginx_apache.md",
665
- "spring mvc": "frameworks/spring.md",
666
- "springboot": "frameworks/spring.md",
667
- "fast api": "frameworks/fastapi.md",
668
- "helm": "vulnerabilities/kubernetes.md",
669
- "firestore": "technologies/firebase_firestore.md",
670
- "two-pass": "tools/nmap.md",
671
- "two pass nmap": "tools/nmap.md",
672
- "nmap two": "tools/nmap.md",
673
- "sentry": "reconnaissance/monitoring_secrets_exposure.md",
674
- "sentry dsn": "reconnaissance/monitoring_secrets_exposure.md",
675
- "dsn exposed": "reconnaissance/monitoring_secrets_exposure.md",
676
- "monitoring secret": "reconnaissance/monitoring_secrets_exposure.md",
677
- "datadog": "reconnaissance/monitoring_secrets_exposure.md",
678
- "honeycomb": "reconnaissance/monitoring_secrets_exposure.md",
679
- "new relic": "reconnaissance/monitoring_secrets_exposure.md",
680
- "newrelic": "reconnaissance/monitoring_secrets_exposure.md",
681
- "rollbar": "reconnaissance/monitoring_secrets_exposure.md",
682
- "bugsnag": "reconnaissance/monitoring_secrets_exposure.md",
683
- "logrocket": "reconnaissance/monitoring_secrets_exposure.md",
684
- "error tracking key": "reconnaissance/monitoring_secrets_exposure.md",
685
- "ingest.sentry": "reconnaissance/monitoring_secrets_exposure.md",
686
- "sentry_key": "reconnaissance/monitoring_secrets_exposure.md",
687
- "rum token": "reconnaissance/monitoring_secrets_exposure.md",
688
- "internal hostname": "reconnaissance/js_internal_hostname_intelligence.md",
689
- "internal host js": "reconnaissance/js_internal_hostname_intelligence.md",
690
- "fleet hostname": "reconnaissance/js_internal_hostname_intelligence.md",
691
- "fleet.live": "reconnaissance/js_internal_hostname_intelligence.md",
692
- "internal url js": "reconnaissance/js_internal_hostname_intelligence.md",
693
- "obfuscated hostname": "reconnaissance/js_internal_hostname_intelligence.md",
694
- "hex hostname": "reconnaissance/js_internal_hostname_intelligence.md",
695
- "hex subdomain": "reconnaissance/js_internal_hostname_intelligence.md",
696
- "infrastructure leak": "reconnaissance/js_internal_hostname_intelligence.md",
697
- "cluster naming": "reconnaissance/js_internal_hostname_intelligence.md",
698
- "internal service url": "reconnaissance/js_internal_hostname_intelligence.md",
699
- "javalin": "reconnaissance/js_internal_hostname_intelligence.md",
700
- "error parameter disclosure": "reconnaissance/js_internal_hostname_intelligence.md",
701
- "progressive parameter": "reconnaissance/js_internal_hostname_intelligence.md",
702
- "parameter enumeration": "reconnaissance/js_internal_hostname_intelligence.md",
703
- "storybook": "reconnaissance/exposed_devtools_detection.md",
704
- "component library exposed": "reconnaissance/exposed_devtools_detection.md",
705
- "design system exposed": "reconnaissance/exposed_devtools_detection.md",
706
- "circuit-ui": "reconnaissance/exposed_devtools_detection.md",
707
- "serial terminal": "reconnaissance/exposed_devtools_detection.md",
708
- "webserial": "reconnaissance/exposed_devtools_detection.md",
709
- "web serial api": "reconnaissance/exposed_devtools_detection.md",
710
- "hardware interface exposed": "reconnaissance/exposed_devtools_detection.md",
711
- "origin-trial": "reconnaissance/exposed_devtools_detection.md",
712
- "origin trial": "reconnaissance/exposed_devtools_detection.md",
713
- "dev cluster": "reconnaissance/exposed_devtools_detection.md",
714
- "dev.solo": "reconnaissance/exposed_devtools_detection.md",
715
- "solo cluster": "reconnaissance/exposed_devtools_detection.md",
716
- "portainer": "reconnaissance/exposed_devtools_detection.md",
717
- "kubernetes dashboard": "reconnaissance/exposed_devtools_detection.md",
718
- "k8s dashboard": "reconnaissance/exposed_devtools_detection.md",
719
- "pgadmin": "reconnaissance/exposed_devtools_detection.md",
720
- "adminer": "reconnaissance/exposed_devtools_detection.md",
721
- "argocd": "reconnaissance/exposed_devtools_detection.md",
722
- "argo cd": "reconnaissance/exposed_devtools_detection.md",
723
- "rancher": "reconnaissance/exposed_devtools_detection.md",
724
- "devtool exposed": "reconnaissance/exposed_devtools_detection.md",
725
- "internal tool exposed": "reconnaissance/exposed_devtools_detection.md",
726
- "firmware debug": "reconnaissance/exposed_devtools_detection.md",
727
- "stories.json": "reconnaissance/exposed_devtools_detection.md",
728
- "opentelemetry": "technologies/observability_stack_attacks.md",
729
- "otel": "technologies/observability_stack_attacks.md",
730
- "otel collector": "technologies/observability_stack_attacks.md",
731
- "otlp": "technologies/observability_stack_attacks.md",
732
- "otlp http": "technologies/observability_stack_attacks.md",
733
- "telemetry endpoint": "technologies/observability_stack_attacks.md",
734
- "observability exposed": "technologies/observability_stack_attacks.md",
735
- "jaeger": "technologies/observability_stack_attacks.md",
736
- "zipkin": "technologies/observability_stack_attacks.md",
737
- "tempo tracing": "technologies/observability_stack_attacks.md",
738
- "loki logs": "technologies/observability_stack_attacks.md",
739
- "6f74656c": "technologies/observability_stack_attacks.md",
740
- "v1/traces": "technologies/observability_stack_attacks.md",
741
- "v1/metrics endpoint": "technologies/observability_stack_attacks.md",
742
- "v1/logs": "technologies/observability_stack_attacks.md",
743
- "trace injection": "technologies/observability_stack_attacks.md",
744
- "metric injection": "technologies/observability_stack_attacks.md",
745
- "grafana exposed": "technologies/observability_stack_attacks.md",
746
- "no basic auth provided": "technologies/observability_stack_attacks.md",
747
- "victoriametrics": "technologies/observability_stack_attacks.md",
748
- "json csrf": "vulnerabilities/csrf_advanced_bypass.md",
749
- "csrf json bypass": "vulnerabilities/csrf_advanced_bypass.md",
750
- "content type csrf": "vulnerabilities/csrf_advanced_bypass.md",
751
- "content-type csrf": "vulnerabilities/csrf_advanced_bypass.md",
752
- "csrf bypass": "vulnerabilities/csrf_advanced_bypass.md",
753
- "csrf token bypass": "vulnerabilities/csrf_advanced_bypass.md",
754
- "samesite bypass": "vulnerabilities/csrf_advanced_bypass.md",
755
- "samesite lax bypass": "vulnerabilities/csrf_advanced_bypass.md",
756
- "method override csrf": "vulnerabilities/csrf_advanced_bypass.md",
757
- "x-http-method-override": "vulnerabilities/csrf_advanced_bypass.md",
758
- "csrf text/plain": "vulnerabilities/csrf_advanced_bypass.md",
759
- "token not session bound": "vulnerabilities/csrf_advanced_bypass.md",
760
- "double submit csrf": "vulnerabilities/csrf_advanced_bypass.md",
761
- "csrf poc": "vulnerabilities/csrf_advanced_bypass.md",
762
- "csrf application/json": "vulnerabilities/csrf_advanced_bypass.md",
763
- "csrf content type": "vulnerabilities/csrf_advanced_bypass.md",
764
- "csrf advanced": "vulnerabilities/csrf_advanced_bypass.md",
765
- "pii exposure": "vulnerabilities/sensitive_file_pii_exposure.md",
766
- "pii leak": "vulnerabilities/sensitive_file_pii_exposure.md",
767
- "personal data exposure": "vulnerabilities/sensitive_file_pii_exposure.md",
768
- "personal data leak": "vulnerabilities/sensitive_file_pii_exposure.md",
769
- "consent form": "vulnerabilities/sensitive_file_pii_exposure.md",
770
- "consent form exposed": "vulnerabilities/sensitive_file_pii_exposure.md",
771
- "sensitive document": "vulnerabilities/sensitive_file_pii_exposure.md",
772
- "sensitive file exposure": "vulnerabilities/sensitive_file_pii_exposure.md",
773
- "pdf exposure": "vulnerabilities/sensitive_file_pii_exposure.md",
774
- "pdf pii": "vulnerabilities/sensitive_file_pii_exposure.md",
775
- "document pii": "vulnerabilities/sensitive_file_pii_exposure.md",
776
- "nik exposure": "vulnerabilities/sensitive_file_pii_exposure.md",
777
- "ktp exposed": "vulnerabilities/sensitive_file_pii_exposure.md",
778
- "national id exposed": "vulnerabilities/sensitive_file_pii_exposure.md",
779
- "identity document exposed": "vulnerabilities/sensitive_file_pii_exposure.md",
780
- "wp media": "vulnerabilities/sensitive_file_pii_exposure.md",
781
- "wp-json media": "vulnerabilities/sensitive_file_pii_exposure.md",
782
- "wordpress media": "vulnerabilities/sensitive_file_pii_exposure.md",
783
- "media endpoint": "vulnerabilities/sensitive_file_pii_exposure.md",
784
- "wp/v2/media": "vulnerabilities/sensitive_file_pii_exposure.md",
785
- "uploads exposed": "vulnerabilities/sensitive_file_pii_exposure.md",
786
- "wp-content/uploads": "vulnerabilities/sensitive_file_pii_exposure.md",
787
- "file enumeration": "vulnerabilities/sensitive_file_pii_exposure.md",
788
- "unauthenticated file access": "vulnerabilities/sensitive_file_pii_exposure.md",
789
- "pdftotext": "vulnerabilities/sensitive_file_pii_exposure.md",
790
- "gdpr violation": "vulnerabilities/sensitive_file_pii_exposure.md",
791
- "pdpa violation": "vulnerabilities/sensitive_file_pii_exposure.md",
792
- "data protection violation": "vulnerabilities/sensitive_file_pii_exposure.md",
793
- "privacy violation": "vulnerabilities/sensitive_file_pii_exposure.md",
794
- "s3 file exposure": "vulnerabilities/sensitive_file_pii_exposure.md",
795
- "bucket file listing": "vulnerabilities/sensitive_file_pii_exposure.md",
796
- "cms file enumeration": "vulnerabilities/sensitive_file_pii_exposure.md",
797
- "directory listing pdf": "vulnerabilities/sensitive_file_pii_exposure.md",
798
- "unhandled exception": "vulnerabilities/unhandled_exception_differential.md",
799
- "exception differential": "vulnerabilities/unhandled_exception_differential.md",
800
- "differential error analysis": "vulnerabilities/unhandled_exception_differential.md",
801
- "500 on auth": "vulnerabilities/unhandled_exception_differential.md",
802
- "500 malformed token": "vulnerabilities/unhandled_exception_differential.md",
803
- "malformed bearer": "vulnerabilities/unhandled_exception_differential.md",
804
- "bearer null": "vulnerabilities/unhandled_exception_differential.md",
805
- "jwt malformation": "vulnerabilities/unhandled_exception_differential.md",
806
- "jwt null": "vulnerabilities/unhandled_exception_differential.md",
807
- "jwt undefined": "vulnerabilities/unhandled_exception_differential.md",
808
- "jwt parse error": "vulnerabilities/unhandled_exception_differential.md",
809
- "jwt alg none": "vulnerabilities/unhandled_exception_differential.md",
810
- "token parsing error": "vulnerabilities/unhandled_exception_differential.md",
811
- "auth crash": "vulnerabilities/unhandled_exception_differential.md",
812
- "auth exception": "vulnerabilities/unhandled_exception_differential.md",
813
- "internal server error auth": "vulnerabilities/unhandled_exception_differential.md",
814
- "403 vs 500": "vulnerabilities/unhandled_exception_differential.md",
815
- "error code differential": "vulnerabilities/unhandled_exception_differential.md",
816
- "baseline differential": "vulnerabilities/unhandled_exception_differential.md",
817
- "fail open auth": "vulnerabilities/unhandled_exception_differential.md",
818
- "fail closed": "vulnerabilities/unhandled_exception_differential.md",
819
- "null bearer": "vulnerabilities/unhandled_exception_differential.md",
820
- "truncated jwt": "vulnerabilities/unhandled_exception_differential.md",
821
- "jwt segment count": "vulnerabilities/unhandled_exception_differential.md",
822
- "auth parse failure": "vulnerabilities/unhandled_exception_differential.md",
823
- "otp endpoint crash": "vulnerabilities/unhandled_exception_differential.md",
824
- "otp generate 500": "vulnerabilities/unhandled_exception_differential.md",
825
- "token fuzzing": "vulnerabilities/unhandled_exception_differential.md",
826
- "bearer token fuzzing": "vulnerabilities/unhandled_exception_differential.md",
827
- "authorization header fuzzing": "vulnerabilities/unhandled_exception_differential.md",
828
- "error status comparison": "vulnerabilities/unhandled_exception_differential.md",
829
- "server error on invalid token": "vulnerabilities/unhandled_exception_differential.md",
830
- "exception on authentication": "vulnerabilities/unhandled_exception_differential.md",
831
- "timing differential": "vulnerabilities/unhandled_exception_differential.md",
832
- "error message disclosure": "vulnerabilities/unhandled_exception_differential.md",
833
- "graphql auth bypass": "protocols/graphql.md",
834
- "graphql basic auth bypass": "protocols/graphql.md",
835
- "graphql 401 bypass": "protocols/graphql.md",
836
- "graphql no auth": "protocols/graphql.md",
837
- "graphql unauthenticated": "protocols/graphql.md",
838
- "unauthenticated graphql": "protocols/graphql.md",
839
- "graphql without authentication": "protocols/graphql.md",
840
- "graphql bypass basic auth": "protocols/graphql.md",
841
- "graphql path bypass": "protocols/graphql.md",
842
- "graphql endpoint bypass": "protocols/graphql.md",
843
- "graphql environment bypass": "protocols/graphql.md",
844
- "dev environment graphql": "protocols/graphql.md",
845
- "staging graphql": "protocols/graphql.md",
846
- "non-production graphql": "protocols/graphql.md",
847
- "ppd graphql": "protocols/graphql.md",
848
- "uat graphql": "protocols/graphql.md",
849
- "graphql introspection": "protocols/graphql.md",
850
- "introspection enabled": "protocols/graphql.md",
851
- "graphql schema disclosure": "protocols/graphql.md",
852
- "graphql __schema": "protocols/graphql.md",
853
- "__introspectionquery": "protocols/graphql.md",
854
- "graphql schema leak": "protocols/graphql.md",
855
- "graphql type disclosure": "protocols/graphql.md",
856
- "graphql resolver bypass": "protocols/graphql.md",
857
- "graphql resolver idor": "protocols/graphql.md",
858
- "graphql authorization bypass": "protocols/graphql.md",
859
- "graphql missing auth": "protocols/graphql.md",
860
- "graphql access control": "protocols/graphql.md",
861
- "graphql permission bypass": "protocols/graphql.md",
862
- "graphql data leak": "protocols/graphql.md",
863
- "graphql data exposure": "protocols/graphql.md",
864
- "graphql admin mutation": "protocols/graphql.md",
865
- "graphql admin field": "protocols/graphql.md",
866
- "graphql sensitive field": "protocols/graphql.md",
867
- "graphql federation": "protocols/graphql.md",
868
- "graphql subgraph": "protocols/graphql.md",
869
- "graphql _entities": "protocols/graphql.md",
870
- "graphql apollo federation": "protocols/graphql.md",
871
- "graphql idor": "protocols/graphql.md",
872
- "graphql alias enumeration": "protocols/graphql.md",
873
- "graphql batching attack": "protocols/graphql.md",
874
- "graphql complexity attack": "protocols/graphql.md",
875
- "graphql dos": "protocols/graphql.md",
876
- "graphql fragment bomb": "protocols/graphql.md",
877
- "graphql injection": "protocols/graphql.md",
878
- "graphql csrf": "protocols/graphql.md",
879
- "graphql subscription": "protocols/graphql.md",
880
- "graphql websocket": "protocols/graphql.md",
881
- "graphql persisted query": "protocols/graphql.md",
882
- "graphql apq": "protocols/graphql.md",
883
- "graphql cursor manipulation": "protocols/graphql.md",
884
- "graphql relay": "protocols/graphql.md",
885
- "graphql defer": "protocols/graphql.md",
886
- "graphql file upload": "protocols/graphql.md",
887
- "graphql playground": "protocols/graphql.md",
888
- "graphiql": "protocols/graphql.md",
889
- "hasura graphql": "protocols/graphql.md",
890
- "apollo graphql": "protocols/graphql.md",
891
- "graphql hasura": "protocols/graphql.md",
892
- "graphql apollo": "protocols/graphql.md",
893
- "proxy auth bypass graphql": "protocols/graphql.md",
894
- "nginx basic auth bypass": "protocols/graphql.md",
895
- "reverse proxy bypass api": "protocols/graphql.md",
896
- "api path not protected": "protocols/graphql.md",
897
- "auth gate bypass api": "protocols/graphql.md",
898
- "bola": "vulnerabilities/idor.md",
899
- "bola attack": "vulnerabilities/idor.md",
900
- "object level authorization": "vulnerabilities/idor.md",
901
- "broken object level": "vulnerabilities/idor.md",
902
- "idor enumeration": "vulnerabilities/idor.md",
903
- "idor automation": "vulnerabilities/idor.md",
904
- "cross account access": "vulnerabilities/idor.md",
905
- "cross tenant access": "vulnerabilities/idor.md",
906
- "multi tenant idor": "vulnerabilities/idor.md",
907
- "tenant isolation bypass": "vulnerabilities/idor.md",
908
- "sequential id enumeration": "vulnerabilities/idor.md",
909
- "integer id enumeration": "vulnerabilities/idor.md",
910
- "uuid enumeration": "vulnerabilities/idor.md",
911
- "blind idor": "vulnerabilities/idor.md",
912
- "etag differential": "vulnerabilities/idor.md",
913
- "size differential idor": "vulnerabilities/idor.md",
914
- "timing differential idor": "vulnerabilities/idor.md",
915
- "graphql alias idor": "vulnerabilities/idor.md",
916
- "graphql bola": "vulnerabilities/idor.md",
917
- "relay node idor": "vulnerabilities/idor.md",
918
- "horizontal privilege escalation": "vulnerabilities/idor.md",
919
- "batch idor": "vulnerabilities/idor.md",
920
- "bulk operation idor": "vulnerabilities/idor.md",
921
- "job id idor": "vulnerabilities/idor.md",
922
- "export idor": "vulnerabilities/idor.md",
923
- "invoice idor": "vulnerabilities/idor.md",
924
- "signed url idor": "vulnerabilities/idor.md",
925
- "ownership bypass": "vulnerabilities/idor.md",
926
- "resource takeover": "vulnerabilities/idor.md",
927
- "multi principal test": "vulnerabilities/idor.md",
928
- "x-organization-id bypass": "vulnerabilities/idor.md",
929
- "x-tenant-id bypass": "vulnerabilities/idor.md",
930
- "grpc idor": "vulnerabilities/idor.md",
931
- "secondary idor": "vulnerabilities/idor.md",
932
- "info disclosure": "vulnerabilities/information_disclosure.md",
933
- "git exposure": "vulnerabilities/information_disclosure.md",
934
- "git dump": "vulnerabilities/information_disclosure.md",
935
- "git recovery": "vulnerabilities/information_disclosure.md",
936
- ".git exposed": "vulnerabilities/information_disclosure.md",
937
- "dvcs exposure": "vulnerabilities/information_disclosure.md",
938
- "svn exposure": "vulnerabilities/information_disclosure.md",
939
- "sourcemap exposed": "vulnerabilities/information_disclosure.md",
940
- "js source map": "vulnerabilities/information_disclosure.md",
941
- "webpack source map": "vulnerabilities/information_disclosure.md",
942
- "js bundle secret": "vulnerabilities/information_disclosure.md",
943
- "hardcoded secret": "vulnerabilities/information_disclosure.md",
944
- "hardcoded credential": "vulnerabilities/information_disclosure.md",
945
- "env variable leaked": "vulnerabilities/information_disclosure.md",
946
- "next_public leaked": "vulnerabilities/information_disclosure.md",
947
- "react_app leaked": "vulnerabilities/information_disclosure.md",
948
- "vite env leaked": "vulnerabilities/information_disclosure.md",
949
- "__next_data__": "vulnerabilities/information_disclosure.md",
950
- "nextjs data leak": "vulnerabilities/information_disclosure.md",
951
- "nextjs exposure": "vulnerabilities/information_disclosure.md",
952
- "backup file exposed": "vulnerabilities/information_disclosure.md",
953
- "config file exposed": "vulnerabilities/information_disclosure.md",
954
- ".env exposed": "vulnerabilities/information_disclosure.md",
955
- "dotenv exposed": "vulnerabilities/information_disclosure.md",
956
- "stack trace": "vulnerabilities/information_disclosure.md",
957
- "debug page": "vulnerabilities/information_disclosure.md",
958
- "swagger exposed": "vulnerabilities/information_disclosure.md",
959
- "openapi exposed": "vulnerabilities/api_schema_exposure.md",
960
- "api docs exposed": "vulnerabilities/information_disclosure.md",
961
- "actuator exposed": "vulnerabilities/information_disclosure.md",
962
- "sensitive file": "vulnerabilities/information_disclosure.md",
963
- "version disclosure": "vulnerabilities/information_disclosure.md",
964
- "server header": "vulnerabilities/information_disclosure.md",
965
- "internal path disclosure": "vulnerabilities/information_disclosure.md",
966
- "exif data": "vulnerabilities/information_disclosure.md",
967
- "metadata leakage": "vulnerabilities/information_disclosure.md",
968
- "secret scanning": "vulnerabilities/information_disclosure.md",
969
- "credential in js": "vulnerabilities/information_disclosure.md",
970
- "token in javascript": "vulnerabilities/information_disclosure.md",
971
- "differential oracle": "vulnerabilities/information_disclosure.md",
972
- "mass assignment rails": "vulnerabilities/mass_assignment.md",
973
- "mass assignment django": "vulnerabilities/mass_assignment.md",
974
- "mass assignment laravel": "vulnerabilities/mass_assignment.md",
975
- "mass assignment node": "vulnerabilities/mass_assignment.md",
976
- "mass assignment mongoose": "vulnerabilities/mass_assignment.md",
977
- "mass assignment prisma": "vulnerabilities/mass_assignment.md",
978
- "mass assignment graphql": "vulnerabilities/mass_assignment.md",
979
- "parameter binding": "vulnerabilities/mass_assignment.md",
980
- "isadmin injection": "vulnerabilities/mass_assignment.md",
981
- "role injection": "vulnerabilities/mass_assignment.md",
982
- "privilege escalation api": "vulnerabilities/mass_assignment.md",
983
- "role escalation": "vulnerabilities/mass_assignment.md",
984
- "admin flag bypass": "vulnerabilities/mass_assignment.md",
985
- "strong params bypass": "vulnerabilities/mass_assignment.md",
986
- "fillable bypass": "vulnerabilities/mass_assignment.md",
987
- "guarded bypass": "vulnerabilities/mass_assignment.md",
988
- "drf serializer bypass": "vulnerabilities/mass_assignment.md",
989
- "mongoose select false": "vulnerabilities/mass_assignment.md",
990
- "req.body injection": "vulnerabilities/mass_assignment.md",
991
- "body parser injection": "vulnerabilities/mass_assignment.md",
992
- "ownership field injection": "vulnerabilities/mass_assignment.md",
993
- "ownerid injection": "vulnerabilities/mass_assignment.md",
994
- "userid injection": "vulnerabilities/mass_assignment.md",
995
- "plan bypass": "vulnerabilities/mass_assignment.md",
996
- "tier bypass": "vulnerabilities/mass_assignment.md",
997
- "credit manipulation": "vulnerabilities/mass_assignment.md",
998
- "feature flag bypass": "vulnerabilities/mass_assignment.md",
999
- "verified bypass": "vulnerabilities/mass_assignment.md",
1000
- "email verification bypass": "vulnerabilities/mass_assignment.md",
1001
- "graphql input injection": "vulnerabilities/mass_assignment.md",
1002
- "mutation field injection": "vulnerabilities/mass_assignment.md",
1003
- "nested attribute injection": "vulnerabilities/mass_assignment.md",
1004
- "accepts nested attributes": "vulnerabilities/mass_assignment.md",
1005
- "registration mass assignment": "vulnerabilities/mass_assignment.md",
1006
- "signup field injection": "vulnerabilities/mass_assignment.md",
1007
- "openapi exposure": "vulnerabilities/api_schema_exposure.md",
1008
- "swagger exposure": "vulnerabilities/api_schema_exposure.md",
1009
- "api docs exposure": "vulnerabilities/api_schema_exposure.md",
1010
- "api schema exposure": "vulnerabilities/api_schema_exposure.md",
1011
- "api documentation exposure": "vulnerabilities/api_schema_exposure.md",
1012
- "api spec exposure": "vulnerabilities/api_schema_exposure.md",
1013
- "public openapi": "vulnerabilities/api_schema_exposure.md",
1014
- "public swagger": "vulnerabilities/api_schema_exposure.md",
1015
- "public api docs": "vulnerabilities/api_schema_exposure.md",
1016
- "docs.json": "vulnerabilities/api_schema_exposure.md",
1017
- "docs.html": "vulnerabilities/api_schema_exposure.md",
1018
- "swagger.json exposed": "vulnerabilities/api_schema_exposure.md",
1019
- "openapi.json exposed": "vulnerabilities/api_schema_exposure.md",
1020
- "redoc exposed": "vulnerabilities/api_schema_exposure.md",
1021
- "swagger ui exposed": "vulnerabilities/api_schema_exposure.md",
1022
- "swagger ui public": "vulnerabilities/api_schema_exposure.md",
1023
- "v3/api-docs": "vulnerabilities/api_schema_exposure.md",
1024
- "api-docs exposed": "vulnerabilities/api_schema_exposure.md",
1025
- "api documentation public": "vulnerabilities/api_schema_exposure.md",
1026
- "unauthenticated api docs": "vulnerabilities/api_schema_exposure.md",
1027
- "unprotected swagger": "vulnerabilities/api_schema_exposure.md",
1028
- "unprotected openapi": "vulnerabilities/api_schema_exposure.md",
1029
- "internal hostname in spec": "vulnerabilities/api_schema_exposure.md",
1030
- "servers array internal": "vulnerabilities/api_schema_exposure.md",
1031
- "openapi internal hostname": "vulnerabilities/api_schema_exposure.md",
1032
- "swagger internal host": "vulnerabilities/api_schema_exposure.md",
1033
- "api spec internal host": "vulnerabilities/api_schema_exposure.md",
1034
- "servers url internal": "vulnerabilities/api_schema_exposure.md",
1035
- "internal url disclosed": "vulnerabilities/api_schema_exposure.md",
1036
- "openapi ssrf": "vulnerabilities/api_schema_exposure.md",
1037
- "endpoint inventory": "vulnerabilities/api_schema_exposure.md",
1038
- "api endpoint inventory": "vulnerabilities/api_schema_exposure.md",
1039
- "openapi endpoint enumeration": "vulnerabilities/api_schema_exposure.md",
1040
- "swagger endpoint list": "vulnerabilities/api_schema_exposure.md",
1041
- "api schema analysis": "vulnerabilities/api_schema_exposure.md",
1042
- "openapi analysis": "vulnerabilities/api_schema_exposure.md",
1043
- "security scheme disclosure": "vulnerabilities/api_schema_exposure.md",
1044
- "auth header disclosure": "vulnerabilities/api_schema_exposure.md",
1045
- "apikey scheme": "vulnerabilities/api_schema_exposure.md",
1046
- "openapi security scheme": "vulnerabilities/api_schema_exposure.md",
1047
- "unauthenticated endpoint in spec": "vulnerabilities/api_schema_exposure.md",
1048
- "security empty array": "vulnerabilities/api_schema_exposure.md",
1049
- "nestjs docs": "vulnerabilities/api_schema_exposure.md",
1050
- "nestjs swagger": "vulnerabilities/api_schema_exposure.md",
1051
- "fastify swagger": "vulnerabilities/api_schema_exposure.md",
1052
- "fastify documentation": "vulnerabilities/api_schema_exposure.md",
1053
- "spring actuator docs": "vulnerabilities/api_schema_exposure.md",
1054
- "springdoc openapi": "vulnerabilities/api_schema_exposure.md",
1055
- "fastapi docs": "vulnerabilities/api_schema_exposure.md",
1056
- "flask flasgger": "vulnerabilities/api_schema_exposure.md",
1057
- "django rest schema": "vulnerabilities/api_schema_exposure.md",
1058
- "laravel swagger": "vulnerabilities/api_schema_exposure.md",
1059
- "spec to ssrf": "vulnerabilities/api_schema_exposure.md",
1060
- "api spec ssrf chain": "vulnerabilities/api_schema_exposure.md",
1061
- "openapi idor": "vulnerabilities/api_schema_exposure.md",
1062
- "swagger idor": "vulnerabilities/api_schema_exposure.md",
1063
- "api spec mass assignment": "vulnerabilities/api_schema_exposure.md",
1064
- "docs internal ssrf": "vulnerabilities/api_schema_exposure.md",
1065
- "api documentation recon": "vulnerabilities/api_schema_exposure.md",
1066
- "full api inventory": "vulnerabilities/api_schema_exposure.md",
1067
- "49 paths disclosed": "vulnerabilities/api_schema_exposure.md",
1068
- "api path enumeration": "vulnerabilities/api_schema_exposure.md",
1069
- "api recon from docs": "vulnerabilities/api_schema_exposure.md",
1070
- "business logic": "vulnerabilities/business_logic.md",
1071
- "workflow bypass": "vulnerabilities/business_logic.md",
1072
- "state machine": "vulnerabilities/business_logic.md",
1073
- "price manipulation": "vulnerabilities/business_logic.md",
1074
- "price tampering": "vulnerabilities/business_logic.md",
1075
- "coupon abuse": "vulnerabilities/business_logic.md",
1076
- "discount abuse": "vulnerabilities/business_logic.md",
1077
- "payment logic": "vulnerabilities/business_logic.md",
1078
- "refund abuse": "vulnerabilities/business_logic.md",
1079
- "limit bypass": "vulnerabilities/business_logic.md",
1080
- "inventory race": "vulnerabilities/business_logic.md",
1081
- "idempotency": "vulnerabilities/business_logic.md",
1082
- "saga": "vulnerabilities/business_logic.md",
1083
- "deserialization": "vulnerabilities/deserialization.md",
1084
- "php deserialization": "vulnerabilities/deserialization.md",
1085
- "phpggc": "vulnerabilities/deserialization.md",
1086
- "cve-2022-22965": "vulnerabilities/spring4shell.md",
1087
- "subdomain enumeration": "reconnaissance/subdomain_enum.md",
1088
- "subdomain enum": "reconnaissance/subdomain_enum.md",
1089
- "assetfinder": "reconnaissance/subdomain_enum.md",
1090
- "subdomain bruteforce": "reconnaissance/subdomain_enum.md",
1091
- "subdomain passive": "reconnaissance/subdomain_enum.md",
1092
- "subdomain active": "reconnaissance/subdomain_enum.md",
1093
- "ct logs": "reconnaissance/subdomain_enum.md",
1094
- "dns axfr": "reconnaissance/subdomain_enum.md",
1095
- "wildcard dns": "reconnaissance/subdomain_enum.md",
1096
- "vhost fuzzing": "reconnaissance/subdomain_enum.md",
1097
- "virtual host": "reconnaissance/subdomain_enum.md",
1098
- "permutation subdomain": "reconnaissance/subdomain_enum.md",
1099
- "alterx": "reconnaissance/subdomain_enum.md",
1100
- "gotator": "reconnaissance/subdomain_enum.md",
1101
- "dnsgen": "reconnaissance/subdomain_enum.md",
1102
- "puredns": "reconnaissance/subdomain_enum.md",
1103
- "massdns": "reconnaissance/subdomain_enum.md",
1104
- "dnsx": "reconnaissance/subdomain_enum.md",
1105
- "passive recon subdomain": "reconnaissance/subdomain_enum.md",
1106
- "active recon subdomain": "reconnaissance/subdomain_enum.md",
1107
- "subdomain takeover detection": "reconnaissance/subdomain_enum.md",
1108
- "dangling cname": "reconnaissance/subdomain_enum.md",
1109
- "spf record subdomain": "reconnaissance/subdomain_enum.md",
1110
- "mx record enum": "reconnaissance/subdomain_enum.md",
1111
- "js subdomain": "reconnaissance/subdomain_enum.md",
1112
- "csp subdomain": "reconnaissance/subdomain_enum.md",
1113
- "favicon hash subdomain": "reconnaissance/subdomain_enum.md",
1114
- "asn subdomain": "reconnaissance/subdomain_enum.md",
1115
- "reverse dns": "reconnaissance/subdomain_enum.md",
1116
- "waybackurls subdomain": "reconnaissance/subdomain_enum.md",
1117
- "github dork subdomain": "reconnaissance/subdomain_enum.md",
1118
- "airecon subdomain": "reconnaissance/subdomain_enum.md",
1119
- "login": "vulnerabilities/auth_workflow.md",
1120
- "login form": "vulnerabilities/auth_workflow.md",
1121
- "authenticate": "vulnerabilities/auth_workflow.md",
1122
- "authentication": "vulnerabilities/auth_workflow.md",
1123
- "credentials": "vulnerabilities/auth_workflow.md",
1124
- "sign in": "vulnerabilities/auth_workflow.md",
1125
- "sign-in": "vulnerabilities/auth_workflow.md",
1126
- "multi-step login": "vulnerabilities/auth_workflow.md",
1127
- "username password": "vulnerabilities/auth_workflow.md",
1128
- "totp": "vulnerabilities/auth_workflow.md",
1129
- "2fa": "vulnerabilities/auth_workflow.md",
1130
- "two-factor": "vulnerabilities/auth_workflow.md",
1131
- "mfa": "vulnerabilities/auth_workflow.md",
1132
- "otp": "vulnerabilities/auth_workflow.md",
1133
- "one-time password": "vulnerabilities/auth_workflow.md",
1134
- "authenticator app": "vulnerabilities/auth_workflow.md",
1135
- "google authenticator": "vulnerabilities/auth_workflow.md",
1136
- "totp secret": "vulnerabilities/auth_workflow.md",
1137
- "handle totp": "vulnerabilities/auth_workflow.md",
1138
- "captcha": "vulnerabilities/auth_workflow.md",
1139
- "recaptcha": "vulnerabilities/auth_workflow.md",
1140
- "hcaptcha": "vulnerabilities/auth_workflow.md",
1141
- "cloudflare turnstile": "vulnerabilities/auth_workflow.md",
1142
- "solve captcha": "vulnerabilities/auth_workflow.md",
1143
- "session cookie": "vulnerabilities/auth_workflow.md",
1144
- "auth cookie": "vulnerabilities/auth_workflow.md",
1145
- "save auth": "vulnerabilities/auth_workflow.md",
1146
- "inject cookie": "vulnerabilities/auth_workflow.md",
1147
- "auth state": "vulnerabilities/auth_workflow.md",
1148
- "restore session": "vulnerabilities/auth_workflow.md",
1149
- "request user input": "vulnerabilities/auth_workflow.md",
1150
- "user input required": "vulnerabilities/auth_workflow.md",
1151
- "manual input": "vulnerabilities/auth_workflow.md",
1152
- "interactive auth": "vulnerabilities/auth_workflow.md",
1153
- "oauth authorize": "vulnerabilities/auth_workflow.md",
1154
- "oauth flow": "vulnerabilities/auth_workflow.md",
1155
- "sso login": "vulnerabilities/auth_workflow.md",
1156
- "login_form": "vulnerabilities/auth_workflow.md",
1157
- "handle_totp": "vulnerabilities/auth_workflow.md",
1158
- "check_auth_status": "vulnerabilities/auth_workflow.md",
1159
- "browser login": "vulnerabilities/auth_workflow.md",
1160
- "wapiti": "tools/wapiti.md",
1161
- "wapiti scan": "tools/wapiti.md",
1162
- "wapiti -u": "tools/wapiti.md",
1163
- "wapiti module": "tools/wapiti.md",
1164
- "wapiti json": "tools/wapiti.md",
1165
- "nikto": "tools/wapiti.md",
1166
- "nikto scan": "tools/wapiti.md",
1167
- "nikto -h": "tools/wapiti.md",
1168
- "alternative tool": "tools/tool_catalog.md",
1169
- "try another tool": "tools/tool_catalog.md",
1170
- "different tool": "tools/tool_catalog.md",
1171
- "other scanner": "tools/tool_catalog.md",
1172
- "web vulnerability scanner": "tools/wapiti.md",
1173
- "web vuln scan": "tools/wapiti.md",
1174
- "misconfig": "tools/wapiti.md",
1175
- "server misconfiguration": "tools/wapiti.md",
1176
- "dangerous files": "tools/wapiti.md",
1177
- "scan for vulnerabilities": "tools/wapiti.md",
1178
- "vulnerability scanner": "tools/wapiti.md",
1179
- "http headers check": "tools/wapiti.md",
1180
- "security headers": "tools/wapiti.md",
1181
- "backup files": "tools/wapiti.md",
1182
- "log4shell": "tools/wapiti.md",
1183
- "shellshock": "tools/wapiti.md"
1184
- }
1185
- }