PRIMARY CATEGORY → WEB PENTESTING Server-Side Attacks ⟡ BROKEN AUTH. LFI SQLi FILE UPLOAD COMMAND INJECTION XXE IDOR SSRF SSTI SSI INJECTION XSLT INJECTION HTTP VERB TAMPERING LDAP INJECTION NOSQLi WEB MASS ASSIGNMENT DESERIALIZATION Client-Side Attacks ⟡ XSS
