当前位置：网站首页>A series of articles, a summary of common vulnerabilities of Web penetration (continuously updated)
A series of articles, a summary of common vulnerabilities of Web penetration (continuously updated)
2022-04-23 07:56:00 【Fish in Siyuan Lake】
Preface
This article is right web Summary of common vulnerabilities of penetration
Basic knowledge of
- One article makes it clear Cookie、Session And Token
- One article makes it clear DNS Domain name resolution
- Understand linux Next user （ Group ） And authority
- Understand iptables
- IP Some cold knowledge of address , Can be used to bypass and cheat
Web Script vulnerability
- sql Inject detailed explanation
- The file contains a detailed explanation of the vulnerability
- Detailed explanation of Command Execution Vulnerability and Code Execution Vulnerability
- Detailed explanation of file upload vulnerability
- SSRF Detailed explanation of loopholes
- XXE Detailed explanation of loopholes
- XSS Detailed explanation of loopholes
- CSRF Detailed explanation of loopholes
- Detailed explanation of deserialization vulnerability
- SSTI Detailed explanation
Code and password
- Summary of common passwords and codes CTF in Crypto and Misc necessary
- Summary of common methods of compressed packet encryption cracking CTF in Misc necessary
- Summary of common file headers and steganography CTF in Misc necessary
- Modern password series ：RSA Password details
other
- Detailed explanation of source code leakage
- PHP Summary of various safety problems in
- flask session safety problem and python Format string vulnerability
- On logical loopholes
- One article makes it clear DNS Cache poisoning
- One article understands the right to raise ： Overflow rights and third-party component rights
- Understand HTTP Smuggling request vulnerability
- Learn about gold notes and silver notes
Conclusion
This article summarizes the common web Loophole
Follow up with new learning
Continue to update
版权声明
本文为[Fish in Siyuan Lake]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/04/202204230628264778.html
边栏推荐
- Shapley Explanation Networks
- VBA調用SAP RFC實現數據讀取＆寫入
- Suggestions on university learning route planning
- How does Apache Hudi accelerate traditional batch mode?
- RGB color to hex and unit conversion
- Mongodb 启动警告信息处理
- ES6 uses recursion to implement deep copy
- 《内网安全攻防：渗透测试实战指南》读书笔记（六）：域控制器安全
- unity UGUI判断点击在UI上和3D物体上的解决方案
- 如何展示您的数字作品集：来自创意招聘人员的建议
猜你喜欢
Shapley Explanation Networks
Dropping Pixels for Adversarial Robustness
SAP GUI安全性
Using lambda expression to solve the problem of C file name sorting (whether it is 100 or 11)
Common markdown grammar learning
Mongodb 启动警告信息处理
Understanding the role of individual units in a deep neural networks
Houdini＞刚体, 刚体破碎RBD
Houdini＞流体，刚体导出学习过程笔记
Zhuang understand's TA notes (VI) < fakeenvreflect & rust, rust effect >
随机推荐
Houdini＞刚体, 刚体破碎RBD
About USB flash drive data prompt raw, need to format, data recovery notes
C reads the registry
About unity to obtain links related to the transformation of real geographic maps into 3D
爬虫学习笔记，学习爬虫，看本篇就够了
05 use of array
VBA调用SAP RFC实现数据读取＆写入
C read INI file and write data to INI file
Nodejs (VI) sub process operation
《内网安全攻防：渗透测试实战指南》读书笔记（七）：跨域攻击分析及防御
Unity C＃ 单例模式 学习复习笔记
C SVG path parser of xamarin version
The problem of exporting excel form with wireframe and internal spacing of form by using web form
Nodejs (four) character reading
Unable to process jar entry [module info. Class]
When using flash, the code ends automatically without an error, the connection cannot be maintained, and the URL cannot be accessed.
Shapley Explanation Networks
内网渗透系列：内网隧道之pingtunnel
Using lambda expression to solve the problem of C file name sorting (whether it is 100 or 11)
第七章 资产减值