mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 11:35:51 +00:00
copilot-swe-agent[bot]
ab9c127df3
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
16 lines
560 B
Markdown
16 lines
560 B
Markdown
# A03 - Injection
|
|
|
|
## Description
|
|
Injection flaws occur when untrusted data is sent to an interpreter as part of a command or query. The attacker's hostile data can trick the interpreter into executing unintended commands or accessing data without proper authorization.
|
|
|
|
## Common Injection Types
|
|
- SQL Injection
|
|
- Cross-Site Scripting (XSS)
|
|
- Command Injection
|
|
- LDAP Injection
|
|
- XML Injection
|
|
- Template Injection
|
|
|
|
## Testing Approach
|
|
Submit malicious input containing special characters and observe application behavior, error messages, and response times.
|