mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
dbf612f6b1
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
A03 - Injection
Description
Injection flaws occur when untrusted data is sent to an interpreter as part of a command or query. The attacker's hostile data can trick the interpreter into executing unintended commands or accessing data without proper authorization.
Common Injection Types
- SQL Injection
- Cross-Site Scripting (XSS)
- Command Injection
- LDAP Injection
- XML Injection
- Template Injection
Testing Approach
Submit malicious input containing special characters and observe application behavior, error messages, and response times.