Portswigger
Access ControlAuthenticationBusiness Logic VulnerabilitiesClickjackingCommand InjectionCORSCSRFDirectory TraversalDOM-based VulnerabilitiesFile upload VulnerabilitiesHTTP Host Header AttacksHTTP Request SmugglingInformation DisclosureInsecure DeserializationJWT AttacksOAuth AuthenticationServer Side Template InjectionSQL injectionSSRFWeb Cache PoisoningWebSocketsXSSXXE Injection