JSON to XXE (Blind)
|
Web Application |
100 |
|
S3 bucket misconfiguration
|
Web Application |
100 |
|
Insecure Direct Object Reference
|
Web Application |
100 |
|
XPATH Injection
|
Web Application |
100 |
|
Old Backup Files
|
Web Application |
100 |
|
Review comment and Metadata
|
Web Application |
100 |
|
Default Credentials
|
Web Application |
100 |
|
RFI
|
Web Application |
100 |
|
Unrestricted File Upload
|
Web Application |
100 |
|
XXE
|
Web Application |
100 |
|
REST API HTTP Methods
|
Web Application |
100 |
|
Guessable Session ID
|
Web Application |
100 |
|
JWT Misconfiguration
|
Web Application |
100 |
|
Client Side Validation Bypass
|
Web Application |
100 |
|
Server Fingerprint
|
Web Application |
100 |
|
JavaScript - Info leak
|
Web Application |
100 |
|
Encoding - Hashing
|
Web Application |
100 |
|
Login bypass
|
Web Application |
100 |
|
HTML5 Controls
|
Web Application |
100 |
|
UDP Traffic
|
Non-HTTP Traffic |
100 |
|
TCP Traffic
|
Non-HTTP Traffic |
100 |
|
HTTPS Traffic
|
HTTP Traffic |
100 |
|
HTTP Traffic
|
HTTP Traffic |
100 |
|
Sanity Check Flag
|
Sanity Check |
0 |
|