The Hackers Codex

Table of Contents Introduction HTML Injection Host Header Injection Username Enumeration SSN Same Origin Policy Exploiting CORS Misconfigurations Origin Reflection Attacks CSRF CSRF Bypass Clickjacking Drag and Drop Redirection Bugs XSS Cross-Site Scripting Identifying XSS Vulnerabilities JSONP Language-Specific XSS SOME Attacks CSV Injection HTTP Desync Web Cache Poisoning Conclusion