Skip to content
This repository has been archived by the owner on Mar 26, 2024. It is now read-only.

Commit

Permalink
Merge pull request #22 from GuillaumeDorschner/GuillaumeDorschner-pat…
Browse files Browse the repository at this point in the history
…ch-3

Update hack.md
  • Loading branch information
GuillaumeDorschner committed Oct 30, 2023
2 parents 3eedd83 + f1c077d commit 10466ec
Showing 1 changed file with 11 additions and 11 deletions.
22 changes: 11 additions & 11 deletions Documentation/hack.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,27 +5,27 @@
All the vulnerabilities listed below are essential to know when it comes to web security. These vulnerabilities are the most common and are the most likely to be exploited. It is important to know how to prevent these vulnerabilities from being exploited and how to fix them if they are exploited.

- [XSS (Cross-Site Scripting)](xss.md)
- *Injecting malicious scripts into web pages viewed by other users.*
*Injecting malicious scripts into web pages viewed by other users.*
- [RAFI (Remote File Inclusion)](rafi.md)
- *Exploiting scripts to include files located on remote servers.*
*Exploiting scripts to include files located on remote servers.*
- [Remote File Insertion](remote-file-insertion.md)
- *Inserting malicious files into web applications.*
*Inserting malicious files into web applications.*
- [CSRF (Cross-Site Request Forgery)](csrf.md)
- *Unauthorized commands are transmitted from a user the website trusts.*
*Unauthorized commands are transmitted from a user the website trusts.*
- [SQL Injection](sql-injection.md)
- *Inserting or "injecting" an SQL query via the input data from the client to the application.*
*Inserting or "injecting" an SQL query via the input data from the client to the application.*
- [Session Hijacking](session-hijacking.md)
- *Illegally gaining access to another user's web session.*
*Illegally gaining access to another user's web session.*

## Bonus Vulnerabilities

- [HTTP](http.md)
- *Utilize Wireshark for sniffing passwords, usernames, and other sensitive data.*
*Utilize Wireshark for sniffing passwords, usernames, and other sensitive data.*
- [Lack of Rate Limiting (DDoS)](lack-of-rate-limiting.md)
- *Potentially looping through the site with multiple computers or renting servers to crash the site.*
*Potentially looping through the site with multiple computers or renting servers to crash the site.*
- [No Logging](no-logging.md)
- *Absence of event logging, making malicious activities difficult to trace.*
*Absence of event logging, making malicious activities difficult to trace.*
- [Execution of Malicious Files](execution-of-malicious-files.md)
- *Running harmful files, potentially affecting the system or network.*
*Running harmful files, potentially affecting the system or network.*
- [Metadata Not Removed](metadata-not-removed.md)
- *For example, not removing geolocation data from profile pictures.*
*For example, not removing geolocation data from profile pictures.*

0 comments on commit 10466ec

Please sign in to comment.