🧪 Misc Web Attacks
Catch-all for techniques without their own file yet.
XPath Injection
string(//user[name/text()='+USER+' and password/text()='+PASS+']/account/text())
/user/username[contains(., '+VALUE+')]Abusive values: ')]/password | a[contains(a,' · ')] (ignore first condition) · | a[contains(a,' (ignore last).
Reference: HackTricks XPath injection.
SSRF
Add &x= in the URL. Consider rbndr DNS rebinding.
XSS
Watch for eval() sinks and reflected/stored input.
Object Deserialization (PHP)
Start by checking phpinfo. Review disable_functions / open_basedir bypasses:
PHP useful functions & bypasses.