PortSwigger 20
- PortSwigger: Stored DOM XSS
- PortSwigger: DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded
- Reflected XSS into attribute with angle brackets HTML-encoded
- DOM XSS in jQuery anchor href attribute sink using location.search source
- DOM XSS in innerHTML sink using source location.search
- DOM XSS in document.write sink using source location.search
- Stored XSS into HTML context with nothing encoded
- Reflected XSS into HTML context with nothing encoded
- Blind SQL injection with out-of-band interaction
- Blind SQL injection: the five oracles
- Blind SQL injection with time delays and information retrieval
- Blind SQL injection with time delays
- Visible error-based SQL injection
- Blind SQL injection with conditional errors
- Blind SQL injection with conditional responses
- SQL injection UNION attack, retrieving multiple values in a single column
- SQL injection UNION attack, retrieving data from other tables
- SQL injection with filter bypass via XML encoding
- SQL injection UNION attack: finding a column containing text
- SQL injection UNION attack: determining the number of columns