Web Attacks
Techniques for breaking web application logic, bypassing filters, and executing code on the server.
01 / FILE UPLOADS
File Upload Attacks
Bypass client-side, blacklist, and whitelist filters to achieve remote code execution via malicious uploads.
Bypass the filters →
02 / INJECTION
SQL Injection
From UNION-based to blind exploitation, with automated attacks using SQLMap and WAF bypass techniques.
Inject the queries →
03 / FUZZING
Attacking with Ffuf
Directory, extension, page, recursive, subdomain, vhost, parameter, and value fuzzing — the complete methodology.
Fuzz the target →