> For the complete documentation index, see [llms.txt](https://blog.s1rn3tz.ovh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.s1rn3tz.ovh/pentest-web.md).

# Pentest Web

## Mindmap

<figure><img src="/files/e6wzAiFEZDUCf9zm1byo" alt=""><figcaption></figcaption></figure>

## Sommaire

{% content-ref url="/pages/aFlNH6LNZD9mvYRdvcR3" %}
[Brute force / Fuzzing](/pentest-web/brute-force-fuzzing.md)
{% endcontent-ref %}

{% content-ref url="/pages/MHHi07XmkPAdtwPQTGS9" %}
[Injections](/pentest-web/injections.md)
{% endcontent-ref %}

{% content-ref url="/pages/s7cLthb8VyIWnSoW2GQn" %}
[Open redirect](/pentest-web/open-redirect.md)
{% endcontent-ref %}

{% content-ref url="/pages/5RjiDRnEouJuDXPtZ4DU" %}
[Path Traversal / LFI / RFI](/pentest-web/path-traversal-lfi-rfi.md)
{% endcontent-ref %}

{% content-ref url="/pages/yYxuRNW0pBLp0ypO72hZ" %}
[Bypass](/pentest-web/bypass.md)
{% endcontent-ref %}

{% content-ref url="/pages/NSq71IcrcW1bROS3J5wh" %}
[Charges utiles](/pentest-web/charges-utiles.md)
{% endcontent-ref %}

{% content-ref url="/pages/vd2LujkBB6zKJdhESQvq" %}
[CMS (Content Management System)](/pentest-web/cms-content-management-system.md)
{% endcontent-ref %}

{% content-ref url="/pages/QvvN6EnHuNezcdZpvTO7" %}
[SOP bypass](/pentest-web/sop-bypass.md)
{% endcontent-ref %}

{% content-ref url="/pages/iVKBa0A4KMMHZ9dyPtgb" %}
[Clickjacking](/pentest-web/clickjacking.md)
{% endcontent-ref %}

{% content-ref url="/pages/qd1JnlQiCWDZnXUT4KXl" %}
[Insecure deserialization](/pentest-web/insecure-deserialization.md)
{% endcontent-ref %}

{% content-ref url="/pages/HdeMTFtyUYSqrguifYTO" %}
[Web Cache Poisoning / Deception](/pentest-web/web-cache-poisoning-deception.md)
{% endcontent-ref %}

{% content-ref url="/pages/NSJmDb2XmseDPrbZVOX9" %}
[HTTP Smuggling](/pentest-web/http-smuggling.md)
{% endcontent-ref %}

{% content-ref url="/pages/DAn0UCcmZuUXB95us105" %}
[OAuth](/pentest-web/oauth.md)
{% endcontent-ref %}

{% content-ref url="/pages/RQDEj4eJjVnPhzZUIDeZ" %}
[SAML](/pentest-web/saml.md)
{% endcontent-ref %}

{% content-ref url="/pages/m9L4GtJYgoydxR3o1grG" %}
[JSON Web Token](/pentest-web/json-web-token.md)
{% endcontent-ref %}

{% content-ref url="/pages/zPVDZrHvOmTJhSDAn71R" %}
[CSRF](/pentest-web/csrf.md)
{% endcontent-ref %}

{% content-ref url="/pages/ArsnNnRCteYNNJYeFfPG" %}
[IDOR](/pentest-web/idor.md)
{% endcontent-ref %}

{% content-ref url="/pages/0SQhAysNFTNGF1NUNjg0" %}
[SSRF](/pentest-web/ssrf.md)
{% endcontent-ref %}

{% content-ref url="/pages/GAktpj1w2JtCHGuzf8ie" %}
[Mot de passe oublié](/pentest-web/mot-de-passe-oublie.md)
{% endcontent-ref %}

{% content-ref url="/pages/cevYz9kZNElM0uIrSv9U" %}
[Fonctions d'achat et de facturation](/pentest-web/fonctions-dachat-et-de-facturation.md)
{% endcontent-ref %}

{% content-ref url="/pages/Pu5zj4OGnknDtHlqF1X1" %}
[Broken authentication / register](/pentest-web/broken-authentication-register.md)
{% endcontent-ref %}

{% content-ref url="/pages/LzaR4hMMCm3hZ89Oxpjf" %}
[Panneaux d'administration](/pentest-web/panneaux-dadministration.md)
{% endcontent-ref %}

{% content-ref url="/pages/zhyYIg3nl2ucifj7F3V9" %}
[Upload features](/pentest-web/upload-features.md)
{% endcontent-ref %}

{% content-ref url="/pages/wIzybFDObOenq04xs796" %}
[Broken Link Hijacking](/pentest-web/broken-link-hijacking.md)
{% endcontent-ref %}

{% content-ref url="/pages/0xfhoxT4uaWvZqg1O2zM" %}
[Prise de contrôle de sous-domaine](/pentest-web/prise-de-controle-de-sous-domaine.md)
{% endcontent-ref %}

{% content-ref url="/pages/QqIBc7LpI1uUawCOI9gj" %}
[Analyse statique](/pentest-web/analyse-statique.md)
{% endcontent-ref %}

{% content-ref url="/pages/lIpLNhAgVcQXzhlBpWL9" %}
[One liners](/pentest-web/one-liners.md)
{% endcontent-ref %}

{% content-ref url="/pages/Jj8i8khFEOZvxwqLk7F4" %}
[Misconfigurations](/pentest-web/misconfigurations.md)
{% endcontent-ref %}

{% content-ref url="/pages/7DLKRYiUPit1UPm5Adfc" %}
[AWS S3](/pentest-web/aws-s3.md)
{% endcontent-ref %}

{% content-ref url="/pages/6GJYVJiyq3hUtt8KhXnH" %}
[Captcha](/pentest-web/captcha.md)
{% endcontent-ref %}

{% content-ref url="/pages/S5TJcj9TLn2lXgcWBcUT" %}
[Race conditions](/pentest-web/race-conditions.md)
{% endcontent-ref %}

{% content-ref url="/pages/gJ7DMvuwMDh18n6GasM3" %}
[Autre](/pentest-web/autre.md)
{% endcontent-ref %}