portswigger 21
- PortSwigger: DOM XSS via document.write Inside a select Element
- PortSwigger: Stored XSS into Anchor href Attribute with Double Quotes HTML-Encoded
- PortSwigger: Reflected XSS into a JavaScript String with Angle Brackets HTML Encoded
- Reflected XSS into attribute with angle brackets HTML-encoded
- DOM XSS in jQuery anchor href attribute sink using location.search source
- DOM XSS in innerHTML sink using source location.search
- DOM XSS in document.write sink using source location.search
- Stored XSS into HTML context with nothing encoded
- Reflected XSS into HTML context with nothing encoded
- Blind SQL injection with out-of-band interaction
- Blind SQL injection: the five oracles
- Blind SQL injection with time delays and information retrieval
- Blind SQL injection with time delays
- Visible error-based SQL injection
- Blind SQL injection with conditional errors
- Blind SQL injection with conditional responses
- SQL injection UNION attack, retrieving multiple values in a single column
- SQL injection UNION attack, retrieving data from other tables
- SQL injection with filter bypass via XML encoding
- SQL injection UNION attack: finding a column containing text
- SQL injection UNION attack: determining the number of columns