…

..

access_control_bypass.md

…

account_registration_and_forms.md

…

account_takeover_chain.md

…

ai_api_key_exfiltration.md

…

api_bola_chained.md

…

api_bola_numeric_ids.md

…

api_excessive_data.md

…

api_key_exposure.md

…

api_rate_limiting.md

…

appserver_exposure.md

…

arbitrary_file_delete.md

…

arbitrary_file_read.md

…

aspnet_debug_trace.md

…

aspnet_viewstate.md

…

auth_bypass.md

…

authenticated_surface_exploit.md

…

aws_imds_v2_bypass.md

…

azure_blob_public.md

…

azure_imds_exposure.md

…

backup_file_exposure.md

…

bfla.md

…

blind_xss.md

…

bola.md

…

browser_runtime_hooking.md

…

brute_force.md

…

business_logic.md

…

byte_range_cache.md

…

cache_poisoning.md

…

captcha_bypass.md

…

cdn_cache_key_poisoning.md

…

ci_cd_secret_leak.md

…

cleartext_transmission.md

…

clickjacking_poc.md

…

clickjacking.md

…

client_side_path_traversal.md

…

client_side_template_injection.md

…

cloud_iam_privesc.md

…

cloud_metadata_exposure.md

…

cms_default_admin.md

…

cms_fingerprint.md

…

command_injection.md

…

container_escape_advanced.md

…

container_escape.md

…

cors_misconfig.md

…

coupon_logic_abuse.md

…

crlf_injection.md

…

csrf_poc.md

…

csrf.md

…

css_injection.md

…

csv_injection.md

…

cve_exploit_scripter.md

…

cve_hunter.md

…

cve_known_exploitation.md

…

cve_poc_finder.md

…

cve_research_analyst.md

…

cve_version_fingerprint.md

…

dangling_markup_injection.md

…

debug_mode.md

…

default_credentials.md

…

dependency_confusion.md

…

directory_listing.md

…

docker_socket_exposure.md

…

dom_clobbering.md

…

dom_xss_spa.md

…

drupal_audit.md

…

ecb_pattern_leak.md

…

ecr_public_exposure.md

…

edge_side_includes.md

…

email_injection.md

…

email_verification_bypass.md

…

endpoint_flow_linker.md

…

env_file_exposure.md

…

eol_client_library.md

…

eol_cms_exploitation.md

…

eol_framework_exploitation.md

…

eol_runtime_exploitation.md

…

eol_stack_detection.md

…

excessive_data_exposure.md

…

exposed_admin_panel.md

…

exposed_api_docs.md

…

expression_language_injection.md

…

file_upload.md

…

forced_browsing.md

…

formula_injection_excel.md

…

gcp_metadata_ssrf.md

…

gcs_bucket_misconfig.md

…

git_exposed_repo.md

…

git_svn_exposure_app.md

…

graphql_batching_attack.md

…

graphql_dos_alias_overload.md

…

graphql_dos.md

…

graphql_field_suggestion.md

…

graphql_injection.md

…

graphql_introspection.md

…

grpc_reflection_exposure.md

…

h2c_smuggling.md

…

header_injection.md

…

helm_secret_exposure.md

…

hop_by_hop_abuse.md

…

host_header_injection.md

…

html_injection.md

…

http2_request_smuggling.md

…

http_desync_cl_te.md

…

http_desync_te_cl.md

…

http_methods.md

…

http_smuggling.md

…

idempotency_key_abuse.md

…

idor.md

…

iis_handler_bypass.md

…

iis_tilde_shortname.md

…

iis_webdav.md

…

improper_error_handling.md

…

information_disclosure.md

…

insecure_cdn.md

…

insecure_cookie_flags.md

…

insecure_deserialization.md

…

joomla_audit.md

…

js_source_deep_analysis.md

…

jwt_alg_confusion.md

…

jwt_forgery_spa.md

…

jwt_jku_x5u_injection.md

…

jwt_jwk_injection.md

…

jwt_kid_injection.md

…

jwt_manipulation.md

…

k8s_exposed_dashboard.md

…

k8s_exposed_kubelet.md

…

k8s_rbac_misconfig.md

…

ldap_injection.md

…

lfi.md

…

llm_excessive_agency.md

…

llm_function_calling_abuse.md

…

llm_insecure_output_handling.md

…

llm_jailbreak.md

…

llm_model_dos.md

…

llm_pii_leakage.md

…

llm_rag_poisoning.md

…

llm_supply_chain_plugin.md

…

llm_system_prompt_leak.md

…

llm_tool_invocation_abuse.md

…

llm_training_data_extraction.md

…

log4shell_jndi.md

…

log_injection.md

…

login_sqli_bypass.md

…

mass_assignment.md

…

mfa_bypass_response.md

…

misconfig_debug_endpoints.md

…

misconfig_default_creds.md

…

misconfig_dir_listing.md

…

misconfig_exposed_dashboards.md

…

misconfig_exposed_files.md

…

misconfig_permissive_cors.md

…

misconfig_verbose_errors.md

…

ml_model_inversion.md

…

mutation_xss.md

…

nosql_injection.md

…

oauth_misconfiguration.md

…

oauth_open_redirect_chain.md

…

oauth_pkce_downgrade.md

…

oidc_misconfig.md

…

open_redirect.md

…

orm_injection.md

…

outdated_component.md

…

outdated_dependency_cve.md

…

padding_oracle.md

…

param_miner.md

…

parameter_pollution.md

…

password_reset_poisoning.md

…

path_traversal.md

…

payment_webhook_forgery.md

…

pickle_deserialization.md

…

poc_developer.md

…

postmessage_vulnerability.md

…

presigned_url_abuse.md

…

price_manipulation.md

…

privilege_escalation.md

…

prompt_injection_direct.md

…

prompt_injection_indirect.md

…

prototype_pollution_gadget_hunt.md

…

prototype_pollution.md

…

race_condition.md

…

range_header_dos.md

…

rate_limit_abuse.md

…

rate_limit_bypass.md

…

refresh_token_abuse.md

…

regex_dos.md

…

register_privilege_mass_assign.md

…

response_splitting.md

…

rest_api_versioning.md

…

reverse_proxy_path_confusion.md

…

rfi.md

…

s3_bucket_misconfiguration.md

…

s3_bucket_takeover.md

…

saml_signature_wrapping.md

…

second_order_redirect.md

…

security_headers.md

…

sensitive_data_exposure.md

…

server_side_includes.md

…

server_side_prototype_pollution.md

…

serverless_event_injection.md

…

serverless_misconfiguration.md

…

session_fixation.md

…

smtp_injection.md

…

soap_injection.md

…

source_code_disclosure.md

…

spa_api_discovery.md

…

spa_business_logic.md

…

spa_hidden_admin.md

…

sqli_blind.md

…

sqli_error.md

…

sqli_time.md

…

sqli_union.md

…

ssl_issues.md

…

ssrf_cloud.md

…

ssrf_render_pipeline.md

…

ssrf.md

…

ssti_freemarker.md

…

ssti_jinja2.md

…

ssti_thymeleaf.md

…

ssti_velocity.md

…

ssti.md

…

subdomain_takeover.md

…

tabnabbing.md

…

terraform_state_exposure.md

…

timing_attack.md

…

timing_side_channel_auth.md

…

two_factor_bypass.md

…

twofa_bypass_techniques.md

…

type_juggling.md

…

typosquatting_package.md

…

vector_db_injection.md

…

version_disclosure.md

…

vulnerable_dependency.md

…

weak_encryption.md

…

weak_hashing.md

…

weak_jwt_secret_bruteforce.md

…

weak_password.md

…

weak_random.md

…

web_cache_deception.md

…

web_cache_poisoning_dos.md

…

webauthn_passkey_downgrade.md

…

websocket_csrf.md

…

websocket_hijacking.md

…

websocket_smuggling.md

…

wordpress_audit.md

…

workflow_step_skip.md

…

xpath_injection.md

…

xslt_injection.md

…

xss_dom.md

…

xss_reflected.md

…

xss_stored.md

…

xxe_billion_laughs.md

…

xxe_oob_exfiltration.md

…

xxe.md

…

yaml_deserialization.md

…

zip_slip.md

…