# Tag: web-attacks

See all tags.

SQL Injection Attacks

SQL Injection Attack Illustration

Cross-Site Scripting (XSS) Attacks

Cross-Site Scripting Attack Illustration

Broken Access Control (IDOR) Attacks

Broken Access Control Illustration

Cross-Site Request Forgery (CSRF) Attacks

CSRF Attack Illustration

Server-Side Request Forgery (SSRF) Attacks

SSRF Attack Illustration

XML External Entity (XXE) Attacks

XXE Attack Illustration

CORS (Cross-Origin Resource Sharing) Misconfiguration

CORS Attack Illustration

LDAP Injection Illustration

XPath Injection

XPath Injection Illustration

Host Header Injection

Host Header Injection Illustration

CRLF Injection (HTTP Response Splitting)

CRLF Injection Illustration

HTML Injection Illustration

HTTP Request Smuggling

HTTP Request Smuggling Illustration

Web Cache Poisoning

Web Cache Poisoning Illustration

DOM Clobbering Illustration

GraphQL Injection

GraphQL Injection Illustration

Prototype Pollution (Client-Side)

Prototype Pollution Illustration

Race Conditions (Time-of-Check to Time-of-Use)

Race Conditions Illustration

Mass Assignment

Mass Assignment Illustration

Session Fixation

Session Fixation Illustration

Subdomain Takeover

Subdomain Takeover Illustration