Input-based attacks that manipulate query languages and OS commands.

• SQL Injection
• NoSQL Injection
• OS Command Injection
• XXE Injection
• SSTI

Broken auth flows, privilege escalation, and insecure token handling.

• Broken Access Control
• IDOR
• Authentication Bypass
• JWT Attacks
• OAuth Authentication

Browser-based attacks targeting users through malicious scripts and UI tricks.

• XSS — Reflected
• XSS — Stored
• XSS — DOM Based
• CSRF
• Clickjacking
• CORS Misconfiguration
• WebSockets
• Prototype Pollution

Security flaws in REST and GraphQL APIs including unsafe deserialization.

• API Vulnerabilities
• GraphQL API
• Insecure Deserialization

Server-side request forgery, smuggling, race conditions, and AI-layer attacks.

• SSRF
• Race Conditions
• HTTP Request Smuggling
• HTTP Host Header Attacks
• Web LLM Attacks

Business logic flaws, file handling weaknesses, and information leakage.

• Business Logic
• Path Traversal
• File Upload
• Information Disclosure