Web Application Exploitation

Index < START HERE - AppSecExplained (gitbook.io) (RESOURCE)

SQL Injection Cross-site scripting (XSS)Command Injection

File upload Authentication XXE - External Entities Injection IDOR/BOLA - Insecure Direct Object Reference