> For the complete documentation index, see [llms.txt](https://www.pwny.cc/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.pwny.cc/web-attacks.md).

# WEB ATTACKS

- [Misc](https://www.pwny.cc/web-attacks/misc.md)
- [Command Injection](https://www.pwny.cc/web-attacks/command-injection.md)
- [Cross-Site Scripting (XSS)](https://www.pwny.cc/web-attacks/cross-site-scripting-xss.md)
- [XSS Tips](https://www.pwny.cc/web-attacks/cross-site-scripting-xss/xss-tips.md)
- [WAF Bypasses](https://www.pwny.cc/web-attacks/cross-site-scripting-xss/waf-bypasses.md)
- [Insecure Direct Object Reference (IDOR)](https://www.pwny.cc/web-attacks/insecure-direct-object-reference-idor.md)
- [Insecure File Upload](https://www.pwny.cc/web-attacks/insecure-file-upload.md)
- [Local File Inclusion (LFI)](https://www.pwny.cc/web-attacks/local-file-inclusion-lfi.md)
- [Bypass Techniques](https://www.pwny.cc/web-attacks/local-file-inclusion-lfi/bypass-techniques.md)
- [LFI to RCE](https://www.pwny.cc/web-attacks/local-file-inclusion-lfi/lfi-to-rce.md)
- [OAuth](https://www.pwny.cc/web-attacks/oauth.md)
- [Open Redirect](https://www.pwny.cc/web-attacks/open-redirect.md)
- [Open Redirect to XSS](https://www.pwny.cc/web-attacks/open-redirect/open-redirect-to-xss.md)
- [Server Side Request Forgery (SSRF)](https://www.pwny.cc/web-attacks/server-side-request-forgery-ssrf.md)
- [Server Side Template Injection (SSTI)](https://www.pwny.cc/web-attacks/server-side-template-injection-ssti.md)
- [SQL Injection (SQLi)](https://www.pwny.cc/web-attacks/sql-injection-sqli.md)
- [SQLMap](https://www.pwny.cc/web-attacks/sql-injection-sqli/sqlmap.md)
- [MySQL](https://www.pwny.cc/web-attacks/sql-injection-sqli/mysql.md)
- [MSSQL](https://www.pwny.cc/web-attacks/sql-injection-sqli/mssql.md)
- [Oracle](https://www.pwny.cc/web-attacks/sql-injection-sqli/oracle.md)
- [PostgreSQL](https://www.pwny.cc/web-attacks/sql-injection-sqli/postgresql.md)
- [XML External Entity (XXE)](https://www.pwny.cc/web-attacks/xml-external-entity-xxe.md)