> For the complete documentation index, see [llms.txt](https://notes.dollarboysushil.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.dollarboysushil.com/web-application-pentest.md).

# Web Application Pentest

- [BugForge](https://notes.dollarboysushil.com/web-application-pentest/bugforge.md): Contains writeup for various BugForge labs.
- [SQL Injection (SQLi)](https://notes.dollarboysushil.com/web-application-pentest/bugforge/sql-injection-sqli.md)
- [Cheesy Does It](https://notes.dollarboysushil.com/web-application-pentest/bugforge/sql-injection-sqli/cheesy-does-it.md)
- [Ottergram](https://notes.dollarboysushil.com/web-application-pentest/bugforge/sql-injection-sqli/ottergram.md)
- [CopyPasta](https://notes.dollarboysushil.com/web-application-pentest/bugforge/sql-injection-sqli/copypasta.md)
- [Sokudo - sokudo-004](https://notes.dollarboysushil.com/web-application-pentest/bugforge/sql-injection-sqli/sokudo-sokudo-004.md)
- [Shady Oaks Financial  - shadyoaks-005](https://notes.dollarboysushil.com/web-application-pentest/bugforge/sql-injection-sqli/shady-oaks-financial-shadyoaks-005.md)
- [Business Logic Flaw](https://notes.dollarboysushil.com/web-application-pentest/bugforge/business-logic-flaw.md)
- [Cheesy Does It](https://notes.dollarboysushil.com/web-application-pentest/bugforge/business-logic-flaw/cheesy-does-it.md)
- [Cafe Club](https://notes.dollarboysushil.com/web-application-pentest/bugforge/business-logic-flaw/cafe-club.md)
- [Cheesy Does It](https://notes.dollarboysushil.com/web-application-pentest/bugforge/business-logic-flaw/cheesy-does-it-1.md)
- [Sokudo](https://notes.dollarboysushil.com/web-application-pentest/bugforge/business-logic-flaw/sokudo.md)
- [Cheesy Does It  (forgot\_password flaw)](https://notes.dollarboysushil.com/web-application-pentest/bugforge/business-logic-flaw/cheesy-does-it-forgot_password-flaw.md)
- [IDOR - Insecure Direct Object Reference](https://notes.dollarboysushil.com/web-application-pentest/bugforge/idor-insecure-direct-object-reference.md)
- [Tanuki](https://notes.dollarboysushil.com/web-application-pentest/bugforge/idor-insecure-direct-object-reference/tanuki.md)
- [Tanuki - 2](https://notes.dollarboysushil.com/web-application-pentest/bugforge/idor-insecure-direct-object-reference/tanuki-2.md)
- [CopyPasta](https://notes.dollarboysushil.com/web-application-pentest/bugforge/idor-insecure-direct-object-reference/copypasta.md)
- [CopyPaste - Slug](https://notes.dollarboysushil.com/web-application-pentest/bugforge/idor-insecure-direct-object-reference/copypaste-slug.md): CopyPasta IDOR via Collection Slug Enumeration
- [Broken Access Control](https://notes.dollarboysushil.com/web-application-pentest/bugforge/broken-access-control.md)
- [Tanuki](https://notes.dollarboysushil.com/web-application-pentest/bugforge/broken-access-control/tanuki.md)
- [Cheesy Does It](https://notes.dollarboysushil.com/web-application-pentest/bugforge/broken-access-control/cheesy-does-it.md)
- [CopyPasta](https://notes.dollarboysushil.com/web-application-pentest/bugforge/broken-access-control/copypasta.md)
- [Ottergram](https://notes.dollarboysushil.com/web-application-pentest/bugforge/broken-access-control/ottergram.md)
- [Vaultly - vaultly-002](https://notes.dollarboysushil.com/web-application-pentest/bugforge/broken-access-control/vaultly-vaultly-002.md)
- [Local File Inclusion (LFI)](https://notes.dollarboysushil.com/web-application-pentest/bugforge/local-file-inclusion-lfi.md)
- [Cafe Club](https://notes.dollarboysushil.com/web-application-pentest/bugforge/local-file-inclusion-lfi/cafe-club.md)
- [SSRF (Server-Side Request Forgery)](https://notes.dollarboysushil.com/web-application-pentest/bugforge/ssrf-server-side-request-forgery.md)
- [Tanuki](https://notes.dollarboysushil.com/web-application-pentest/bugforge/ssrf-server-side-request-forgery/tanuki.md)
- [JWT None Algorithm Attack](https://notes.dollarboysushil.com/web-application-pentest/bugforge/jwt-none-algorithm-attack.md)
- [Shady Oaks Financial](https://notes.dollarboysushil.com/web-application-pentest/bugforge/jwt-none-algorithm-attack/shady-oaks-financial.md)
- [Tanuki](https://notes.dollarboysushil.com/web-application-pentest/bugforge/jwt-none-algorithm-attack/tanuki.md)
- [Mass Assignment](https://notes.dollarboysushil.com/web-application-pentest/bugforge/mass-assignment.md)
- [Tanuki](https://notes.dollarboysushil.com/web-application-pentest/bugforge/mass-assignment/tanuki.md)
- [GraphQL IDOR](https://notes.dollarboysushil.com/web-application-pentest/bugforge/graphql-idor.md)
- [Ottergram](https://notes.dollarboysushil.com/web-application-pentest/bugforge/graphql-idor/ottergram.md)
- [XXE](https://notes.dollarboysushil.com/web-application-pentest/bugforge/xxe.md)
- [Tanuki](https://notes.dollarboysushil.com/web-application-pentest/bugforge/xxe/tanuki.md)
- [Race Condition](https://notes.dollarboysushil.com/web-application-pentest/bugforge/race-condition.md)
- [Shady Oaks Financial](https://notes.dollarboysushil.com/web-application-pentest/bugforge/race-condition/shady-oaks-financial.md)
- [JWT Secret Key Brute-Forcing](https://notes.dollarboysushil.com/web-application-pentest/bugforge/jwt-secret-key-brute-forcing.md)
- [Cheesy Does it - cheesy-007](https://notes.dollarboysushil.com/web-application-pentest/bugforge/jwt-secret-key-brute-forcing/cheesy-does-it-cheesy-007.md)
- [OAuth Attacks](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks.md)
- [OAuth Grant Types](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/oauth-grant-types.md)
- [OpenID Connect](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/openid-connect.md)
- [OAuth Attacks (Labs: Portswigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/oauth-attacks-labs-portswigger-academy.md)
- [Lab 1  Authentication bypass via OAuth implicit flow](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/oauth-attacks-labs-portswigger-academy/lab-1-authentication-bypass-via-oauth-implicit-flow.md)
- [Lab 2 Forced OAuth profile linking](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/oauth-attacks-labs-portswigger-academy/lab-2-forced-oauth-profile-linking.md)
- [Lab 3 OAuth account hijacking via redirect\_uri](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/oauth-attacks-labs-portswigger-academy/lab-3-oauth-account-hijacking-via-redirect_uri.md)
- [Lab 4 Stealing OAuth access tokens via an open redirect](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/oauth-attacks-labs-portswigger-academy/lab-4-stealing-oauth-access-tokens-via-an-open-redirect.md)
- [Lab 5 Stealing OAuth access tokens via a proxy page](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/oauth-attacks-labs-portswigger-academy/lab-5-stealing-oauth-access-tokens-via-a-proxy-page.md)
- [Lab 6 SSRF via OpenID dynamic client registration](https://notes.dollarboysushil.com/web-application-pentest/oauth-attacks/oauth-attacks-labs-portswigger-academy/lab-6-ssrf-via-openid-dynamic-client-registration.md)
- [JWT ATTACKS](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks.md): Overview of JWT and JWT attacks
- [JWT Signature Verification Bypass](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-signature-verification-bypass.md)
- [JWT Accepting Unsigned Tokens (alg: none)](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-accepting-unsigned-tokens-alg-none.md)
- [JWT Brute-forcing secret keys (weak signing key)](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-brute-forcing-secret-keys-weak-signing-key.md)
- [JWT header parameter injections (jwk injection)](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-header-parameter-injections-jwk-injection.md)
- [JWT header parameter injections (jku injection)](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-header-parameter-injections-jku-injection.md)
- [JWT algorithm confusion Vulnerabilities](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-algorithm-confusion-vulnerabilities.md)
- [JWT ATTACK Labs](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-attack-labs.md)
- [Lab 1 JWT authentication bypass via unverified signature](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-attack-labs/lab-1-jwt-authentication-bypass-via-unverified-signature.md)
- [Lab 2 JWT authentication bypass via flawed signature verification](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-attack-labs/lab-2-jwt-authentication-bypass-via-flawed-signature-verification.md)
- [Lab 3 JWT authentication bypass via weak signing key](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-attack-labs/lab-3-jwt-authentication-bypass-via-weak-signing-key.md)
- [Lab 4 JWT authentication bypass via jwk header injection](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-attack-labs/lab-4-jwt-authentication-bypass-via-jwk-header-injection.md)
- [Lab 5 JWT authentication bypass via jku header injection](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-attack-labs/lab-5-jwt-authentication-bypass-via-jku-header-injection.md)
- [Lab 6 JWT authentication bypass via kid header path traversal](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-attack-labs/lab-6-jwt-authentication-bypass-via-kid-header-path-traversal.md)
- [Lab 7 JWT authentication bypass via algorithm confusion](https://notes.dollarboysushil.com/web-application-pentest/jwt-attacks/jwt-attack-labs/lab-7-jwt-authentication-bypass-via-algorithm-confusion.md)
- [Authentication Attacks](https://notes.dollarboysushil.com/web-application-pentest/authentication-attacks.md)
- [Authentication Attacks LABS (Portswigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/authentication-attacks/authentication-attacks-labs-portswigger-academy.md)
- [Business Logic Vulnerability](https://notes.dollarboysushil.com/web-application-pentest/business-logic-vulnerability.md)
- [Business Logic Vulnerability (Labs: Portswigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/business-logic-vulnerability/business-logic-vulnerability-labs-portswigger-academy.md)
- [Information Disclosure](https://notes.dollarboysushil.com/web-application-pentest/information-disclosure.md)
- [Infromation Disclosure (Labs: Portswigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/information-disclosure/infromation-disclosure-labs-portswigger-academy.md)
- [Race Conditions](https://notes.dollarboysushil.com/web-application-pentest/race-conditions.md)
- [Race Conditions (Labs: Portswigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/race-conditions/race-conditions-labs-portswigger-academy.md)
- [Access Control Vulnerabilities](https://notes.dollarboysushil.com/web-application-pentest/access-control-vulnerabilities.md)
- [Access Control Vulnerabilities (Labs: PortSwigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/access-control-vulnerabilities/access-control-vulnerabilities-labs-portswigger-academy.md)
- [SSRF - Server Side Request Forgery Attacks](https://notes.dollarboysushil.com/web-application-pentest/ssrf-server-side-request-forgery-attacks.md)
- [SSRF (Labs: Portswigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/ssrf-server-side-request-forgery-attacks/ssrf-labs-portswigger-academy.md)
- [CSRF - Cross Site Request Forgery Attacks](https://notes.dollarboysushil.com/web-application-pentest/csrf-cross-site-request-forgery-attacks.md)
- [CSRF Attacks (Labs: PortSwigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/csrf-cross-site-request-forgery-attacks/csrf-attacks-labs-portswigger-academy.md)
- [CORS - Cross-Origin Resource Sharing Attacks](https://notes.dollarboysushil.com/web-application-pentest/cors-cross-origin-resource-sharing-attacks.md)
- [CORS - Cross-Origin Resource Sharing (Labs: Portswigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/cors-cross-origin-resource-sharing-attacks/cors-cross-origin-resource-sharing-labs-portswigger-academy.md)
- [Cross-Site Scripting (XSS)](https://notes.dollarboysushil.com/web-application-pentest/cross-site-scripting-xss.md)
- [Cross-Site Scripting (XSS) (Labs: Portswigger Academy)](https://notes.dollarboysushil.com/web-application-pentest/cross-site-scripting-xss/cross-site-scripting-xss-labs-portswigger-academy.md)