Web Application Attack Techniques
Web application vulnerabilities and exploitation techniques beyond the OWASP Top 10.
Web application attacks exploit vulnerabilities in the logic and code of websites — including SQL injection, cross-site scripting (XSS), server-side request forgery (SSRF), IDOR, JWT abuse, and business logic flaws — that go beyond the OWASP Top 10. This library of techniques is curated by Vid Grosek, Slovenia's first OSCE3-certified penetration tester.
See also: web application security testing services.
Coming soon.
Frequently Asked Questions
What are web application attacks?
Web application attacks are techniques that exploit vulnerabilities in the logic and code of websites, such as SQL injection, cross-site scripting (XSS), server-side request forgery (SSRF), IDOR, and JWT abuse, to gain unauthorized access or data.
What goes beyond the OWASP Top 10?
Beyond the OWASP Top 10 are application business logic flaws, complex vulnerability chains, and authentication and authorization abuses that automated scanners often miss and that require manual testing.