Research Academy Daily Swig
My account Customers About Blog Careers Legal Contact Resellers
  1. Web Security Academy
  2. Reference

Reference

This page provides links to some of our general reference content. This is a collection of background information on basic web security concepts and Burp features that we refer to from time to time across the Web Security Academy.

All topics

SQL injection XSS CSRF Clickjacking DOM-based CORS XXE SSRF Request smuggling Command injection Server-side template injection Insecure deserialization Directory traversal Access control Authentication OAuth authentication Business logic vulnerabilities Web cache poisoning HTTP Host header attacks WebSockets Information disclosure File upload vulnerabilities