当前位置：网站首页>A series of articles, a summary of common vulnerabilities of Web penetration (continuously updated)
A series of articles, a summary of common vulnerabilities of Web penetration (continuously updated)
2022-04-23 07:56:00 【Fish in Siyuan Lake】
Preface
This article is right web Summary of common vulnerabilities of penetration
Basic knowledge of
- One article makes it clear Cookie、Session And Token
- One article makes it clear DNS Domain name resolution
- Understand linux Next user （ Group ） And authority
- Understand iptables
- IP Some cold knowledge of address , Can be used to bypass and cheat
Web Script vulnerability
- sql Inject detailed explanation
- The file contains a detailed explanation of the vulnerability
- Detailed explanation of Command Execution Vulnerability and Code Execution Vulnerability
- Detailed explanation of file upload vulnerability
- SSRF Detailed explanation of loopholes
- XXE Detailed explanation of loopholes
- XSS Detailed explanation of loopholes
- CSRF Detailed explanation of loopholes
- Detailed explanation of deserialization vulnerability
- SSTI Detailed explanation
Code and password
- Summary of common passwords and codes CTF in Crypto and Misc necessary
- Summary of common methods of compressed packet encryption cracking CTF in Misc necessary
- Summary of common file headers and steganography CTF in Misc necessary
- Modern password series ：RSA Password details
other
- Detailed explanation of source code leakage
- PHP Summary of various safety problems in
- flask session safety problem and python Format string vulnerability
- On logical loopholes
- One article makes it clear DNS Cache poisoning
- One article understands the right to raise ： Overflow rights and third-party component rights
- Understand HTTP Smuggling request vulnerability
- Learn about gold notes and silver notes
Conclusion
This article summarizes the common web Loophole
Follow up with new learning
Continue to update
版权声明
本文为[Fish in Siyuan Lake]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/04/202204230628264778.html
边栏推荐
- webflux文件上传下载
- SAP自建表log功能开启
- Weblux file upload and download
- Shapley Explanation Networks
- 读取修改resource文件夹下的json文件
- Scrapy modifies the time in the statistics at the end of the crawler as the current system time
- 一些靶场的学习记录：sqli-labs、upload-labs、XSS
- Search and replacement of C text file (WinForm)
- 双面显示的shader
- 每天工作4小时的程序员
猜你喜欢
Houdini ＞ rigid body, rigid body breaking RBD
Protobuf 使用
第四章 无形资产
Intranet penetration series: icmpsh of Intranet tunnel
SAP STO With Billing流程与配置
Houdini > fluid, rigid body export, learning process notes
内网渗透系列：内网隧道之dnscat2
内网渗透系列：内网隧道之pingtunnel
企业微信免登录跳转自建应用
FUEL: Fast UAV Exploration using Incremental Frontier Structure and Hierarchical Planning
随机推荐
Unity screen adaptation
Unity C single case mode learning review notes
Weblux file upload and download
Teach-Repeat-Replan: A Complete and Robust System for Aggressive Flight in Complex Environments
The projection vector of a vector to a plane
Intranet penetration series: icmpsh of Intranet tunnel
C＃ 读取注册表
String self generated code within a given range
Search and replacement of C text file (WinForm)
Dictionary & lt; T1,T2＆gt; Sorting problem
ABAP ALV显示金额与导出金额不一致
Nodejs (I) event driven programming
如何展示您的数字作品集：来自创意招聘人员的建议
05 use of array
Unity gets the resources that a file depends on
About unity to obtain links related to the transformation of real geographic maps into 3D
Plane definition - plane equation
SQL sorts string numbers
Use of command line parameter passing library argparse
Solve the problem of deploying mysql8 in docker with correct password but unable to log in to MySQL