Web Applications

Table of contents

1. Generic attacks
2. Specific applications
3. Useful links

---

Generic attacks

• Brute force
• Default Credentials
• Directory Transversal
• Fuzzing
• Local File Inclusion
• SQL Injection
• SSL/TLS Scan

Specific applications

• Apache Tomcat
• WordPress
• Apache Commons Text - Text4Shell [CVE-2022-42889]

Useful links

• Wappalizer to identify technologies used on web applications.