blob: 09107d1286e2a9946664bde1068001aaf024e646 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
# web security
- [websec.fr](https://websec.fr)
## tooling
- devtools
- burp suite
- mitmproxy
- ???
## common attacks
### sqli: sql injection
### xss: cross-site scripting
### xxe: external entity injection
### csrf: cross-site request forgery
### ssrf: server-side request forgery
### request smuggling
### prototype pollution
## common failures
### trusting headers
|
