# Security Knowledge Framework

## Security Knowledge Framework

- [Introduction](https://skf.gitbook.io/asvs-write-ups/readme.md)
- [Auth Bypass](https://skf.gitbook.io/asvs-write-ups/auth-bypass.md)
- [Python - Auth Bypass](https://skf.gitbook.io/asvs-write-ups/auth-bypass/auth-bypass.md)
- [NodeJS - Auth Bypass](https://skf.gitbook.io/asvs-write-ups/auth-bypass/auth-bypass-1.md)
- [Auth Bypass - 1](https://skf.gitbook.io/asvs-write-ups/auth-bypass-1.md)
- [Python - Auth Bypass - 1](https://skf.gitbook.io/asvs-write-ups/auth-bypass-1/auth-bypass-1.md)
- [NodeJS - Auth Bypass - 1](https://skf.gitbook.io/asvs-write-ups/auth-bypass-1/auth-bypass-1-1.md)
- [Java - Auth Bypass - 1](https://skf.gitbook.io/asvs-write-ups/auth-bypass-1/auth-bypass-1-2.md)
- [Auth Bypass - 2](https://skf.gitbook.io/asvs-write-ups/auth-bypass-2.md)
- [Python - Auth Bypass - 2](https://skf.gitbook.io/asvs-write-ups/auth-bypass-2/auth-bypass-2.md)
- [NodeJS - Auth Bypass - 2](https://skf.gitbook.io/asvs-write-ups/auth-bypass-2/auth-bypass-2-1.md)
- [Java - Auth Bypass - 2](https://skf.gitbook.io/asvs-write-ups/auth-bypass-2/auth-bypass-2-2.md)
- [Auth-bypass - 3](https://skf.gitbook.io/asvs-write-ups/auth-bypass-3.md)
- [Python - Auth-bypass - 3](https://skf.gitbook.io/asvs-write-ups/auth-bypass-3/auth-bypass-3.md)
- [NodeJS - Auth-bypass - 3](https://skf.gitbook.io/asvs-write-ups/auth-bypass-3/auth-bypass-3-1.md)
- [Java - Auth-bypass - 3](https://skf.gitbook.io/asvs-write-ups/auth-bypass-3/auth-bypass-3-2.md)
- [Auth-bypass - Simple](https://skf.gitbook.io/asvs-write-ups/auth-bypass-simple.md)
- [Python - Auth-bypass - Simple](https://skf.gitbook.io/asvs-write-ups/auth-bypass-simple/auth-bypass-simple.md)
- [NodeJS - Auth-bypass - Simple](https://skf.gitbook.io/asvs-write-ups/auth-bypass-simple/auth-bypass-simple-1.md)
- [Java - Auth-bypass - Simple](https://skf.gitbook.io/asvs-write-ups/auth-bypass-simple/auth-bypass-simple-2.md)
- [Client Side Restriction Bypass](https://skf.gitbook.io/asvs-write-ups/client-side-restriction-bypass.md)
- [Python - Client Side Restriction Bypass](https://skf.gitbook.io/asvs-write-ups/client-side-restriction-bypass/client-side-restriction-bypass.md)
- [NodeJS - Client Side Restriction Bypass](https://skf.gitbook.io/asvs-write-ups/client-side-restriction-bypass/client-side-restriction-bypass-1.md)
- [Java - Client Side Restriction Bypass](https://skf.gitbook.io/asvs-write-ups/client-side-restriction-bypass/client-side-restriction-bypass-2.md)
- [Client Side Restriction Bypass - Harder](https://skf.gitbook.io/asvs-write-ups/client-side-restriction-bypass-harder.md)
- [Python - Client Side Restriction Bypass - Harder](https://skf.gitbook.io/asvs-write-ups/client-side-restriction-bypass-harder/client-side-restriction-bypass-2.md)
- [NodeJS - Client Side Restriction Bypass - Harder](https://skf.gitbook.io/asvs-write-ups/client-side-restriction-bypass-harder/client-side-restriction-bypass-2-1.md)
- [Java - Client Side Restriction Bypass - Harder](https://skf.gitbook.io/asvs-write-ups/client-side-restriction-bypass-harder/client-side-restriction-bypass-2-2.md)
- [Client Side Template Injection (CSTI)](https://skf.gitbook.io/asvs-write-ups/client-side-template-injection-csti.md)
- [Python - Client Side Template Injection (CSTI)](https://skf.gitbook.io/asvs-write-ups/client-side-template-injection-csti/client-side-template-injection.md)
- [NodeJS - Client Side Template Injection (CSTI)](https://skf.gitbook.io/asvs-write-ups/client-side-template-injection-csti/csti.md)
- [Java - Client Side Template Injection (CSTI)](https://skf.gitbook.io/asvs-write-ups/client-side-template-injection-csti/client-side-template-injection-1.md)
- [Command Injection (CMD)](https://skf.gitbook.io/asvs-write-ups/command-injection-cmd.md)
- [Python - Command Injection (CMD)](https://skf.gitbook.io/asvs-write-ups/command-injection-cmd/cmd-injection-1.md)
- [NodeJS - Command Injection (CMD)](https://skf.gitbook.io/asvs-write-ups/command-injection-cmd/cmd.md)
- [Java - Command Injection (CMD)](https://skf.gitbook.io/asvs-write-ups/command-injection-cmd/cmd-1.md)
- [Command Injection 2 (CMD-2)](https://skf.gitbook.io/asvs-write-ups/command-injection-2-cmd-2.md)
- [Python - Command Injection 2 (CMD-2)](https://skf.gitbook.io/asvs-write-ups/command-injection-2-cmd-2/cmd-injection-2.md)
- [NodeJS - Command Injection 2 (CMD-2)](https://skf.gitbook.io/asvs-write-ups/command-injection-2-cmd-2/cmd2.md)
- [Java - Command Injection 2 (CMD-2)](https://skf.gitbook.io/asvs-write-ups/command-injection-2-cmd-2/cmd2-1.md)
- [Command Injection 3 (CMD-3)](https://skf.gitbook.io/asvs-write-ups/command-injection-3-cmd-3.md)
- [Python - Command Injection 3 (CMD-3)](https://skf.gitbook.io/asvs-write-ups/command-injection-3-cmd-3/command-injection3.md)
- [Java - Command Injection 3 (CMD-3)](https://skf.gitbook.io/asvs-write-ups/command-injection-3-cmd-3/cmd3.md)
- [Command Injection 4 (CMD-4)](https://skf.gitbook.io/asvs-write-ups/command-injection-4-cmd-4.md)
- [Python - Command Injection 4 (CMD-4)](https://skf.gitbook.io/asvs-write-ups/command-injection-4-cmd-4/python-command-injection-4-cmd-4.md)
- [NodeJS - Command Injection 4 (CMD-4)](https://skf.gitbook.io/asvs-write-ups/command-injection-4-cmd-4/cmd4.md)
- [Java - Command Injection 4 (CMD-4)](https://skf.gitbook.io/asvs-write-ups/command-injection-4-cmd-4/cmd4-1.md)
- [Command Injection Blind (CMD-Blind)](https://skf.gitbook.io/asvs-write-ups/command-injection-blind-cmd-blind.md)
- [Python - Command Injection Blind (CMD-Blind)](https://skf.gitbook.io/asvs-write-ups/command-injection-blind-cmd-blind/blind-cmd-injection-1.md)
- [NodeJS - Command Injection Blind (CMD-Blind)](https://skf.gitbook.io/asvs-write-ups/command-injection-blind-cmd-blind/cmd-blind.md)
- [Java - Command Injection Blind (CMD-Blind)](https://skf.gitbook.io/asvs-write-ups/command-injection-blind-cmd-blind/cmd-blind-1.md)
- [Content-Security-Policy (CSP)](https://skf.gitbook.io/asvs-write-ups/content-security-policy-csp.md)
- [Python - Content-Security-Policy (CSP)](https://skf.gitbook.io/asvs-write-ups/content-security-policy-csp/content-security-policy.md)
- [NodeJS - Content-Security-Policy (CSP)](https://skf.gitbook.io/asvs-write-ups/content-security-policy-csp/csp.md)
- [Java - Content-Security-Policy (CSP)](https://skf.gitbook.io/asvs-write-ups/content-security-policy-csp/csp-1.md)
- [CORS exploitation](https://skf.gitbook.io/asvs-write-ups/cors-exploitation.md)
- [Python - CORS exploitation](https://skf.gitbook.io/asvs-write-ups/cors-exploitation/cors-exploitation.md)
- [Java - CORS exploitation](https://skf.gitbook.io/asvs-write-ups/cors-exploitation/cors.md)
- [Credentials Guessing](https://skf.gitbook.io/asvs-write-ups/credentials-guessing.md)
- [Python - Credentials Guessing](https://skf.gitbook.io/asvs-write-ups/credentials-guessing/credentials-guessing-1.md)
- [NodeJS - Credentials Guessing](https://skf.gitbook.io/asvs-write-ups/credentials-guessing/credentials-guessing-1-1.md)
- [Java - Credentials Guessing](https://skf.gitbook.io/asvs-write-ups/credentials-guessing/credentials-guessing-1-2.md)
- [Credentials Guessing - 2](https://skf.gitbook.io/asvs-write-ups/credentials-guessing-2.md)
- [Python - Credentials Guessing - 2](https://skf.gitbook.io/asvs-write-ups/credentials-guessing-2/credentials-guessing-2.md)
- [NodeJS - Credentials Guessing - 2](https://skf.gitbook.io/asvs-write-ups/credentials-guessing-2/credentials-guessing-2-1.md)
- [Java - Credentials Guessing - 2](https://skf.gitbook.io/asvs-write-ups/credentials-guessing-2/credentials-guessing-2-2.md)
- [Cross Site Scripting (XSS)](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-xss.md)
- [Python - XSS](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-xss/cross-site-scripting.md)
- [NodeJS - XSS](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-xss/xss.md)
- [Java - XSS](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-xss/xss-1.md)
- [Cross Site Scripting - Attribute (XSS-Attribute)](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-attribute-xss-attribute.md)
- [Python - XSS-Attribute](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-attribute-xss-attribute/cross-site-scripting-attribute.md)
- [NodeJS - XSS-Attribute](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-attribute-xss-attribute/xss-attribute.md)
- [Cross Site Scripting - href (XSS-href)](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-href-xss-href.md)
- [Python - XSS-href](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-href-xss-href/cross-site-scripting-href.md)
- [NodeJS - XSS-href](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-href-xss-href/xss-url.md)
- [Java - XSS-href](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-href-xss-href/xss-url-1.md)
- [Cross Site Scripting - DOM (XSS-DOM)](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-dom-xss-dom.md)
- [Python - XSS-DOM](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-dom-xss-dom/xss-dom.md)
- [NodeJS - XSS-DOM](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-dom-xss-dom/xss-dom-1.md)
- [Java - XSS-DOM](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-dom-xss-dom/xss-dom-2.md)
- [Cross Site Scripting - DOM-2 (XSS-DOM-2)](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-dom-2-xss-dom-2.md)
- [Python - XSS-DOM-2](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-dom-2-xss-dom-2/xss-dom-2.md)
- [NodeJS - XSS-DOM-2](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-dom-2-xss-dom-2/xss-dom-2-1.md)
- [Java - XSS-DOM-2](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-dom-2-xss-dom-2/xss-dom-2-2.md)
- [Cross Site Scripting - Stored (XSS-Stored)](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-stored-xss-stored.md)
- [Java - XSS-Stored](https://skf.gitbook.io/asvs-write-ups/cross-site-scripting-stored-xss-stored/xss-stored.md)
- [CSRF](https://skf.gitbook.io/asvs-write-ups/csrf.md)
- [Python - CSRF](https://skf.gitbook.io/asvs-write-ups/csrf/csrf.md)
- [NodeJS - CSRF](https://skf.gitbook.io/asvs-write-ups/csrf/csrf-1.md)
- [Java - CSRF](https://skf.gitbook.io/asvs-write-ups/csrf/csrf-2.md)
- [CSRF - Samesite](https://skf.gitbook.io/asvs-write-ups/csrf-samesite.md)
- [Python - CSRF-SameSite](https://skf.gitbook.io/asvs-write-ups/csrf-samesite/csrf-samesite.md)
- [NodeJS - CSRF-SameSite](https://skf.gitbook.io/asvs-write-ups/csrf-samesite/csrf-samesite-1.md)
- [Java - CSRF-SameSite](https://skf.gitbook.io/asvs-write-ups/csrf-samesite/csrf-samesite-2.md)
- [CSRF - Weak](https://skf.gitbook.io/asvs-write-ups/csrf-weak.md)
- [Python - CSRF-Weak](https://skf.gitbook.io/asvs-write-ups/csrf-weak/csrf-weak.md)
- [NodeJS - CSRF-Weak](https://skf.gitbook.io/asvs-write-ups/csrf-weak/csrf-weak-1.md)
- [Java - CSRF-Weak](https://skf.gitbook.io/asvs-write-ups/csrf-weak/csrf-weak-2.md)
- [CSS Injection (CSSI)](https://skf.gitbook.io/asvs-write-ups/css-injection-cssi.md)
- [Python - CSS Injection (CSSI)](https://skf.gitbook.io/asvs-write-ups/css-injection-cssi/cssi.md)
- [NodeJS - CSS Injection (CSSI)](https://skf.gitbook.io/asvs-write-ups/css-injection-cssi/cssi-1.md)
- [Java - CSS Injection (CSSI)](https://skf.gitbook.io/asvs-write-ups/css-injection-cssi/cssi-2.md)
- [Deserialisation Java (DES-Java)](https://skf.gitbook.io/asvs-write-ups/deserialisation-java-des-java.md)
- [Java - Deserialisation Java (DES-Java)](https://skf.gitbook.io/asvs-write-ups/deserialisation-java-des-java/des-java.md)
- [Deserialisation Yaml (DES-Yaml)](https://skf.gitbook.io/asvs-write-ups/deserialisation-yaml-des-yaml.md)
- [Python - Deserialisation Yaml (DES-Yaml)](https://skf.gitbook.io/asvs-write-ups/deserialisation-yaml-des-yaml/deserialisation-yaml.md)
- [Deserialisation Pickle (DES-Pickle)](https://skf.gitbook.io/asvs-write-ups/deserialisation-pickle-des-pickle.md)
- [Python - Deserialisation Pickle (DES-Pickle)](https://skf.gitbook.io/asvs-write-ups/deserialisation-pickle-des-pickle/des-pickle-1.md)
- [Deserialisation Pickle 2 (DES-Pickle-2)](https://skf.gitbook.io/asvs-write-ups/deserialisation-pickle-2-des-pickle-2.md)
- [Python - Deserialisation Pickle 2 (DES-Pickle-2)](https://skf.gitbook.io/asvs-write-ups/deserialisation-pickle-2-des-pickle-2/des-pickle-2.md)
- [DoS Regex](https://skf.gitbook.io/asvs-write-ups/dos-regex.md)
- [Python - DoS Regex](https://skf.gitbook.io/asvs-write-ups/dos-regex/dos-regex.md)
- [NodeJS - DoS Regex](https://skf.gitbook.io/asvs-write-ups/dos-regex/dos-regex-1.md)
- [Java - DoS Regex](https://skf.gitbook.io/asvs-write-ups/dos-regex/dos-regex-2.md)
- [File upload](https://skf.gitbook.io/asvs-write-ups/file-upload.md)
- [Python - File-Upload](https://skf.gitbook.io/asvs-write-ups/file-upload/file-upload.md)
- [NodeJS - File-Upload](https://skf.gitbook.io/asvs-write-ups/file-upload/file-upload-1.md)
- [Java - File-Upload](https://skf.gitbook.io/asvs-write-ups/file-upload/file-upload-2.md)
- [Formula Injection](https://skf.gitbook.io/asvs-write-ups/formula-injection.md)
- [Python - Formula Injection](https://skf.gitbook.io/asvs-write-ups/formula-injection/formula-injection.md)
- [NodeJS - Formula Injection](https://skf.gitbook.io/asvs-write-ups/formula-injection/formula-injection-1.md)
- [Java - Formula Injection](https://skf.gitbook.io/asvs-write-ups/formula-injection/formula-injection-2.md)
- [GraphQL DOS](https://skf.gitbook.io/asvs-write-ups/graphql-dos.md)
- [Python - GraphQL DOS](https://skf.gitbook.io/asvs-write-ups/graphql-dos/graphql-dos.md)
- [GraphQL IDOR](https://skf.gitbook.io/asvs-write-ups/graphql-idor.md)
- [Python - GraphQL IDOR](https://skf.gitbook.io/asvs-write-ups/graphql-idor/graphql-idor.md)
- [NodeJS - GraphQL IDOR](https://skf.gitbook.io/asvs-write-ups/graphql-idor/graphql-idor-1.md)
- [Java - GraphQL IDOR](https://skf.gitbook.io/asvs-write-ups/graphql-idor/graphql-idor-2.md)
- [GraphQL Injections](https://skf.gitbook.io/asvs-write-ups/graphql-injections.md)
- [Python - GraphQL Injections](https://skf.gitbook.io/asvs-write-ups/graphql-injections/graphql-injections.md)
- [NodeJS - GraphQL Injections](https://skf.gitbook.io/asvs-write-ups/graphql-injections/graphql-injection.md)
- [Java - GraphQL Injections](https://skf.gitbook.io/asvs-write-ups/graphql-injections/graphql-injection-1.md)
- [GraphQL Introspection](https://skf.gitbook.io/asvs-write-ups/graphql-introspection.md)
- [Python - GraphQL Introspection](https://skf.gitbook.io/asvs-write-ups/graphql-introspection/graphql-introspection.md)
- [NodeJS - GraphQL Introspection](https://skf.gitbook.io/asvs-write-ups/graphql-introspection/nodejs-graphql-introspection.md)
- [Java - GraphQL Introspection](https://skf.gitbook.io/asvs-write-ups/graphql-introspection/graphql-introspections.md)
- [GraphQL Mutations](https://skf.gitbook.io/asvs-write-ups/graphql-mutations.md)
- [Python - GraphQL Mutations](https://skf.gitbook.io/asvs-write-ups/graphql-mutations/graphql-mutations.md)
- [NodeJS - GraphQL Mutations](https://skf.gitbook.io/asvs-write-ups/graphql-mutations/graphql-mutations-1.md)
- [Java - GraphQL Mutations](https://skf.gitbook.io/asvs-write-ups/graphql-mutations/graphql-mutations-2.md)
- [Host Header Injection (Authentication Bypass)](https://skf.gitbook.io/asvs-write-ups/host-header-injection-authentication-bypass.md)
- [Python - HttpOnly Session Hijacking XSS](https://skf.gitbook.io/asvs-write-ups/host-header-injection-authentication-bypass/python-httponly-session-hijacking-xss.md)
- [HttpOnly Session Hijacking XSS](https://skf.gitbook.io/asvs-write-ups/httponly-session-hijacking-xss.md)
- [Python - HttpOnly Session Hijacking XSS](https://skf.gitbook.io/asvs-write-ups/httponly-session-hijacking-xss/httponly-session-hijacking-xss.md)
- [NodeJS - HttpOnly Session Hijacking XSS](https://skf.gitbook.io/asvs-write-ups/httponly-session-hijacking-xss/session-hijacking-xss.md)
- [Java - HttpOnly Session Hijacking XSS](https://skf.gitbook.io/asvs-write-ups/httponly-session-hijacking-xss/session-hijacking-xss-1.md)
- [Information Leakeage in Comments](https://skf.gitbook.io/asvs-write-ups/information-leakeage-in-comments.md)
- [Python - Information Leakeage in Comments](https://skf.gitbook.io/asvs-write-ups/information-leakeage-in-comments/information-leakeage-comments.md)
- [NodeJS - Information Leakeage in Comments](https://skf.gitbook.io/asvs-write-ups/information-leakeage-in-comments/info-leakage-comments.md)
- [Java - Information Leakeage in Comments](https://skf.gitbook.io/asvs-write-ups/information-leakeage-in-comments/info-leakage-comments-1.md)
- [Information Leakeage in Metadata](https://skf.gitbook.io/asvs-write-ups/information-leakeage-in-metadata.md)
- [Python - Information Leakeage in Metadata](https://skf.gitbook.io/asvs-write-ups/information-leakeage-in-metadata/information-leakeage-metadata.md)
- [NodeJS - Information Leakeage in Metadata](https://skf.gitbook.io/asvs-write-ups/information-leakeage-in-metadata/info-leakage-metadata.md)
- [Java - Information Leakeage in Metadata](https://skf.gitbook.io/asvs-write-ups/information-leakeage-in-metadata/info-leakage-metadata-1.md)
- [Insecure Direct Object References (IDOR)](https://skf.gitbook.io/asvs-write-ups/insecure-direct-object-references-idor.md)
- [Python - Insecure Direct Object References (IDOR)](https://skf.gitbook.io/asvs-write-ups/insecure-direct-object-references-idor/insecure-direct-object-references.md)
- [NodeJS - Insecure Direct Object References (IDOR)](https://skf.gitbook.io/asvs-write-ups/insecure-direct-object-references-idor/idor.md)
- [Java - Insecure Direct Object References (IDOR)](https://skf.gitbook.io/asvs-write-ups/insecure-direct-object-references-idor/idor-1.md)
- [JWT Null](https://skf.gitbook.io/asvs-write-ups/jwt-null.md)
- [Python - JWT Null](https://skf.gitbook.io/asvs-write-ups/jwt-null/jwt-null.md)
- [NodeJS - JWT Null](https://skf.gitbook.io/asvs-write-ups/jwt-null/jwt-null-1.md)
- [Java - JWT Null](https://skf.gitbook.io/asvs-write-ups/jwt-null/jwt-null-2.md)
- [JWT Secret](https://skf.gitbook.io/asvs-write-ups/jwt-secret.md)
- [Python - JWT Secret](https://skf.gitbook.io/asvs-write-ups/jwt-secret/jwt-secret.md)
- [NodeJS - JWT Secret](https://skf.gitbook.io/asvs-write-ups/jwt-secret/jwt-secret-1.md)
- [Java - JWT Secret](https://skf.gitbook.io/asvs-write-ups/jwt-secret/jwt-secret-2.md)
- [Ldap Injection](https://skf.gitbook.io/asvs-write-ups/ldap-injection.md)
- [Python - Ldap Injection](https://skf.gitbook.io/asvs-write-ups/ldap-injection/ldap.md)
- [NodeJS - Ldap Injection](https://skf.gitbook.io/asvs-write-ups/ldap-injection/ldap-1.md)
- [Java - Ldap Injection](https://skf.gitbook.io/asvs-write-ups/ldap-injection/ldap-2.md)
- [Ldap Injection - harder](https://skf.gitbook.io/asvs-write-ups/ldap-injection-harder.md)
- [Python - Ldap Injection - harder](https://skf.gitbook.io/asvs-write-ups/ldap-injection-harder/ldap-harder.md)
- [NodeJS - Ldap Injection - harder](https://skf.gitbook.io/asvs-write-ups/ldap-injection-harder/ldap-harder-1.md)
- [Java - Ldap Injection - harder](https://skf.gitbook.io/asvs-write-ups/ldap-injection-harder/ldap-harder-2.md)
- [Local File Inclusion 1 (LFI-1)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-1-lfi-1.md)
- [Python - Local File Inclusion 1 (LFI-1)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-1-lfi-1/lfi-1.md)
- [NodeJS - Local File Inclusion 1 (LFI-1)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-1-lfi-1/lfi.md)
- [Java - Local File Inclusion 1 (LFI-1)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-1-lfi-1/lfi-2.md)
- [Local File Inclusion 2 (LFI-2)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-2-lfi-2.md)
- [Python - Local File Inclusion 2 (LFI-2)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-2-lfi-2/lfi-2.md)
- [NodeJS - Local File Inclusion 2 (LFI-2)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-2-lfi-2/lfi-2-1.md)
- [Java - Local File Inclusion 2 (LFI-2)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-2-lfi-2/lfi-2-2.md)
- [Local File Inclusion 3 (LFI-3)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-3-lfi-3.md)
- [Python - Local File Inclusion 3 (LFI-3)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-3-lfi-3/lfi-3.md)
- [NodeJS - Local File Inclusion 3 (LFI-3)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-3-lfi-3/lfi-3-1.md)
- [Java - Local File Inclusion 3 (LFI-3)](https://skf.gitbook.io/asvs-write-ups/local-file-inclusion-3-lfi-3/lfi-3-2.md)
- [Parameter Binding](https://skf.gitbook.io/asvs-write-ups/parameter-binding.md)
- [Ruby - Parameter Binding](https://skf.gitbook.io/asvs-write-ups/parameter-binding/parameter-binding.md)
- [NodeJS - Parameter Binding](https://skf.gitbook.io/asvs-write-ups/parameter-binding/parameterbinding.md)
- [Java - Parameter Binding](https://skf.gitbook.io/asvs-write-ups/parameter-binding/parameter-binding-1.md)
- [Prototype Pollution](https://skf.gitbook.io/asvs-write-ups/prototype-pollution.md)
- [NodeJS - Prototype Pollution](https://skf.gitbook.io/asvs-write-ups/prototype-pollution/prototype-pollution.md)
- [Race Condition](https://skf.gitbook.io/asvs-write-ups/race-condition.md)
- [Python - Race Condition](https://skf.gitbook.io/asvs-write-ups/race-condition/race-condition.md)
- [NodeJS - Race Condition](https://skf.gitbook.io/asvs-write-ups/race-condition/racecondition.md)
- [Java - Race Condition](https://skf.gitbook.io/asvs-write-ups/race-condition/racecondition-1.md)
- [Race Condition File-Write](https://skf.gitbook.io/asvs-write-ups/race-condition-file-write.md)
- [Python - Race Condition File-Write](https://skf.gitbook.io/asvs-write-ups/race-condition-file-write/racecondition-file-write.md)
- [NodeJS - Race Condition File-Write](https://skf.gitbook.io/asvs-write-ups/race-condition-file-write/racecondition-file-write-1.md)
- [Java - Race Condition File-Write](https://skf.gitbook.io/asvs-write-ups/race-condition-file-write/racecondition-file-write-2.md)
- [Ratelimiting (Brute-force login)](https://skf.gitbook.io/asvs-write-ups/ratelimiting-brute-force-login.md)
- [Python - Ratelimiting](https://skf.gitbook.io/asvs-write-ups/ratelimiting-brute-force-login/ratelimiting.md)
- [NodeJS - Ratelimiting](https://skf.gitbook.io/asvs-write-ups/ratelimiting-brute-force-login/ratelimiting-1.md)
- [Java - Ratelimiting](https://skf.gitbook.io/asvs-write-ups/ratelimiting-brute-force-login/ratelimiting-2.md)
- [Remote File Inclusion (RFI)](https://skf.gitbook.io/asvs-write-ups/remote-file-inclusion-rfi.md)
- [Python - Remote File Inclusion (RFI)](https://skf.gitbook.io/asvs-write-ups/remote-file-inclusion-rfi/remote-file-inclusion.md)
- [NodeJS - Remote File Inclusion (RFI)](https://skf.gitbook.io/asvs-write-ups/remote-file-inclusion-rfi/rfi.md)
- [Java - Remote File Inclusion (RFI)](https://skf.gitbook.io/asvs-write-ups/remote-file-inclusion-rfi/rfi-1.md)
- [Right To Left Override (RTLO)](https://skf.gitbook.io/asvs-write-ups/right-to-left-override-rtlo.md)
- [Python - Right To Left Override (RTLO)](https://skf.gitbook.io/asvs-write-ups/right-to-left-override-rtlo/right-to-left-override.md)
- [NodeJS - Right To Left Override (RTLO)](https://skf.gitbook.io/asvs-write-ups/right-to-left-override-rtlo/rtlo.md)
- [Java - Right To Left Override (RTLO)](https://skf.gitbook.io/asvs-write-ups/right-to-left-override-rtlo/rtlo-1.md)
- [Server Side Request Forgery (SSRF)](https://skf.gitbook.io/asvs-write-ups/server-side-request-forgery-ssrf.md)
- [Python - Server Side Request Forgery (SSRF)](https://skf.gitbook.io/asvs-write-ups/server-side-request-forgery-ssrf/server-side-request-forgery.md)
- [NodeJS - Server Side Request Forgery (SSRF)](https://skf.gitbook.io/asvs-write-ups/server-side-request-forgery-ssrf/readme-1.md)
- [Server Side Template Injection (SSTI)](https://skf.gitbook.io/asvs-write-ups/server-side-template-injection-ssti.md)
- [Python - Server Side Template Injection (SSTI)](https://skf.gitbook.io/asvs-write-ups/server-side-template-injection-ssti/server-side-template-injection.md)
- [Java - Server Side Template Injection (SSTI)](https://skf.gitbook.io/asvs-write-ups/server-side-template-injection-ssti/ssti.md)
- [Session Hijacking XSS](https://skf.gitbook.io/asvs-write-ups/session-hijacking-xss.md)
- [Session Puzzling](https://skf.gitbook.io/asvs-write-ups/session-puzzling.md)
- [Python - Session Puzzling](https://skf.gitbook.io/asvs-write-ups/session-puzzling/session-puzzling.md)
- [NodeJS - Session Puzzling](https://skf.gitbook.io/asvs-write-ups/session-puzzling/session-puzzling-1.md)
- [Java - Session Puzzling](https://skf.gitbook.io/asvs-write-ups/session-puzzling/sessionpuzzling.md)
- [Session Management 1](https://skf.gitbook.io/asvs-write-ups/session-management-1.md)
- [Python - Session Management 1](https://skf.gitbook.io/asvs-write-ups/session-management-1/session-management-1.md)
- [SQLI (Union)](https://skf.gitbook.io/asvs-write-ups/sqli-union.md)
- [Python - SQLI (Union)](https://skf.gitbook.io/asvs-write-ups/sqli-union/sqli-union-select.md)
- [NodeJS - SQLI (Union)](https://skf.gitbook.io/asvs-write-ups/sqli-union/sqli.md)
- [Java - SQLI (Union)](https://skf.gitbook.io/asvs-write-ups/sqli-union/sqli-1.md)
- [SQLI Login Bypass](https://skf.gitbook.io/asvs-write-ups/sqli-login-bypass.md)
- [Python - Login Bypass](https://skf.gitbook.io/asvs-write-ups/sqli-login-bypass/sqli-login-bypass.md)
- [SQLI (Like)](https://skf.gitbook.io/asvs-write-ups/sqli-like.md)
- [Python - SQLI (Like)](https://skf.gitbook.io/asvs-write-ups/sqli-like/sqli-like.md)
- [NodeJS - SQLI (Like)](https://skf.gitbook.io/asvs-write-ups/sqli-like/sqli-like-1.md)
- [Java - SQLI (Like)](https://skf.gitbook.io/asvs-write-ups/sqli-like/sqli-like-2.md)
- [SQLI (Blind)](https://skf.gitbook.io/asvs-write-ups/sqli-blind.md)
- [Python - SQLI (Blind)](https://skf.gitbook.io/asvs-write-ups/sqli-blind/sqli-blind.md)
- [NodeJS - SQLI (Blind)](https://skf.gitbook.io/asvs-write-ups/sqli-blind/sqli-blind-1.md)
- [Java - SQLI (Blind)](https://skf.gitbook.io/asvs-write-ups/sqli-blind/sqli-blind-2.md)
- [TLS Downgrade](https://skf.gitbook.io/asvs-write-ups/tls-downgrade.md)
- [Python - TLS Downgrade](https://skf.gitbook.io/asvs-write-ups/tls-downgrade/tls-downgrade.md)
- [Untrusted Sources (XSSI)](https://skf.gitbook.io/asvs-write-ups/untrusted-sources-xssi.md)
- [Python - Untrusted Sources (XSSI)](https://skf.gitbook.io/asvs-write-ups/untrusted-sources-xssi/include-files-from-untrusted-sources-js.md)
- [NodeJS - Untrusted Sources (XSSI)](https://skf.gitbook.io/asvs-write-ups/untrusted-sources-xssi/untrusted-sources-js.md)
- [Java - Untrusted Sources (XSSI)](https://skf.gitbook.io/asvs-write-ups/untrusted-sources-xssi/untrusted-sources-js-1.md)
- [URL Redirection](https://skf.gitbook.io/asvs-write-ups/url-redirection.md)
- [Python - URL Redirection](https://skf.gitbook.io/asvs-write-ups/url-redirection/open-redirect.md)
- [NodeJS - URL Redirection](https://skf.gitbook.io/asvs-write-ups/url-redirection/url-redirection.md)
- [Java - URL Redirection](https://skf.gitbook.io/asvs-write-ups/url-redirection/url-redirection-1.md)
- [URL Redirection - Harder](https://skf.gitbook.io/asvs-write-ups/url-redirection-harder.md)
- [Python - URL Redirection - Harder](https://skf.gitbook.io/asvs-write-ups/url-redirection-harder/open-redirect-hard.md)
- [NodeJS - URL Redirection - Harder](https://skf.gitbook.io/asvs-write-ups/url-redirection-harder/url-redirection-harder.md)
- [Java - URL Redirection - Harder](https://skf.gitbook.io/asvs-write-ups/url-redirection-harder/url-redirection-harder-1.md)
- [URL Redirection - Harder-2](https://skf.gitbook.io/asvs-write-ups/url-redirection-harder-2.md)
- [Python - URL Redirection - Harder-2](https://skf.gitbook.io/asvs-write-ups/url-redirection-harder-2/open-redirect-harder-2.md)
- [NodeJS - URL Redirection - Harder-2](https://skf.gitbook.io/asvs-write-ups/url-redirection-harder-2/url-redirection-harder2.md)
- [Java - URL Redirection - Harder-2](https://skf.gitbook.io/asvs-write-ups/url-redirection-harder-2/url-redirection-harder-2.md)
- [WebSocket Message Manipulation](https://skf.gitbook.io/asvs-write-ups/websocket-message-manipulation.md)
- [Python - WebSocket Message Manipulation](https://skf.gitbook.io/asvs-write-ups/websocket-message-manipulation/websocket-message-manipulation.md)
- [XML External Entity (XXE)](https://skf.gitbook.io/asvs-write-ups/xml-external-entity-xxe.md)
- [Python - XXE](https://skf.gitbook.io/asvs-write-ups/xml-external-entity-xxe/xxe.md)
- [NodeJS - XXE](https://skf.gitbook.io/asvs-write-ups/xml-external-entity-xxe/xxe-1.md)
- [Java - XXE](https://skf.gitbook.io/asvs-write-ups/xml-external-entity-xxe/xxe-2.md)
- [Exposed docker daemon](https://skf.gitbook.io/asvs-write-ups/exposed-docker-daemon.md)
- [Python - Exposed docker daemon](https://skf.gitbook.io/asvs-write-ups/exposed-docker-daemon/exposed-docker.md)
- [Insecure Random](https://skf.gitbook.io/asvs-write-ups/insecure-random.md)
- [Python - Insecure Random](https://skf.gitbook.io/asvs-write-ups/insecure-random/insecure-random.md)
- [template item](https://skf.gitbook.io/asvs-write-ups/template.md)