# Web Application Attacks

- [Cross-Site Scripting (XSS)](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/xss-cross-site-scripting.md)
- [File Inclusion](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion.md)
- [Basic LFI Techniques](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/basic-lfi-techniques.md)
- [Advanced Bypasses & PHP Filters](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/advanced-bypasses-filters.md)
- [PHP Wrappers for RCE](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/php-wrappers-rce.md)
- [Remote File Inclusion (RFI)](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/remote-file-inclusion.md)
- [File Upload + LFI](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/file-upload-lfi.md)
- [Log Poisoning Techniques](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/log-poisoning-techniques.md)
- [Automated Scanning & Tools](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/automated-scanning-tools.md)
- [Prevention & Hardening](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/prevention-hardening.md)
- [Skills Assessment Walkthrough](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-inclusion/skills-assessment-walkthrough.md)
- [File Upload Attacks](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks.md)
- [Upload Exploitation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/upload-exploitation.md)
- [Client-Side Validation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/client-side-validation.md)
- [Blacklist Filters](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/blacklist-filters.md)
- [Basic Bypass Techniques](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/basic-bypass-techniques.md)
- [Type Filters](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/type-filters.md)
- [Limited File Uploads](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/limited-file-uploads.md)
- [Advanced Bypass Methods](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/advanced-bypass-methods.md)
- [Other Upload Attacks](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/other-upload-attacks.md)
- [Prevention & Hardening](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/prevention-and-hardening.md)
- [Skills Assessment](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/file-upload-attacks/skills-assessment-walkthrough.md)
- [Command Injection](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection.md)
- [Detection Methods](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/detection-methods.md)
- [Basic Exploitation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/basic-exploitation.md)
- [Advanced Operators](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/advanced-operators.md)
- [Filter Identification](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/filter-identification.md)
- [Bypassing Space Filters](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/bypassing-space-filters.md)
- [Bypassing Character Filters](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/bypassing-character-filters.md)
- [Bypassing Blacklisted Commands](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/bypassing-blacklisted-commands.md)
- [Advanced Command Obfuscation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/advanced-command-obfuscation.md)
- [Evasion Tools](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/evasion-tools.md)
- [Skills Assessment](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/command-injection/skills-assessment-walkthrough.md)
- [Web Attacks](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/web-attacks.md)
- [HTTP Verb Tampering](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/web-attacks/http-verb-tampering.md)
- [Insecure Direct Object References (IDOR)](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/web-attacks/idor-attacks.md)
- [XML External Entity (XXE) Injection](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/web-attacks/xxe-injection.md)
- [Skills Assessment](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/web-attacks/skills-assessment.md)
- [Attacking Common Applications](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications.md)
- [WordPress Discovery & Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/wordpress-discovery-enumeration.md)
- [WordPress Attacks & Exploitation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/wordpress-attacks.md)
- [Joomla Discovery & Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/joomla-discovery-enumeration.md)
- [Joomla Attacks & Exploitation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/joomla-attacks.md)
- [Drupal Discovery & Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/drupal-discovery-enumeration.md)
- [Drupal Attacks & Exploitation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/drupal-attacks.md)
- [Tomcat Discovery & Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/tomcat-discovery-enumeration.md)
- [Tomcat Attacks & Exploitation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/tomcat-attacks.md)
- [Jenkins Discovery & Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/jenkins-discovery-enumeration.md)
- [Jenkins Attacks & Exploitation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/jenkins-attacks.md)
- [Splunk Discovery & Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/splunk-discovery-enumeration.md)
- [Splunk Attacks & Exploitation](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/splunk-attacks.md)
- [GitLab Discovery & Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/gitlab-discovery-enumeration.md)
- [ColdFusion Discovery & Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/coldfusion-discovery-enumeration.md)
- [IIS Tilde Enumeration](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/iis-tilde-enumeration.md)
- [CGI Shellshock Attacks](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/cgi-shellshock-attacks.md)
- [LDAP Injection Attacks](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/ldap-injection-attacks.md)
- [osTicket Attacks](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/osticket-attacks.md)
- [PRTG Attacks](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/prtg-attacks.md)
- [Binary Reverse Engineering](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/binary-reverse-engineering.md)
- [Other Notable Applications](/pentesting-notes/certification-preparation/cpts-prep/web-application-attacks/attacking-common-applications/other-notable-applications.md)
