Category:Web security exploits

• Internet security

B

• BREACH
• Bredolab botnet
• Browser exploit
• Browser isolation
• Browser security

C

• China Chopper
• Clickjacking
• Common Weakness Enumeration
• Content Security Policy
• Content sniffing
• Cookie stuffing
• Cookiejacking
• Cookiemonster attack
• Cross-site cooking
• Cross-site request forgery
• Cross-site scripting
• Cross-site tracing
• Cross-zone scripting
• CurveBall (security vulnerability)

D

• Default Credential vulnerability
• Directory traversal attack
• DNS over HTTPS
• DNS rebinding
• Double encoding
• Downgrade attack

E

• Evil twin (wireless networks)

F

• Fakesysdef
• File inclusion vulnerability
• Form grabbing
• FREAK

G

• Gh0st RAT

H

• HTTP cookie
• HTTP header injection
• HTTP Public Key Pinning
• HTTP request smuggling
• HTTP response splitting
• HTTP Strict Transport Security

I

• IDN homograph attack
• Insecure direct object reference

L

• Logjam (computer security)

M

• Man-in-the-browser
• Mass assignment vulnerability
• Metasploit

N

• Nikto (vulnerability scanner)

O

• Open redirect
• OWASP
• OWASP ZAP

P

• Patched (malware)
• PLA Unit 61398
• POODLE

R

• Referer spoofing
• Reflected DOM Injection

S

• Same-origin policy
• Self-XSS
• Session fixation
• Session hijacking
• Session poisoning
• Snarfing
• Social jacking
• Spoofed URL

T

• TorrentLocker
• Trojan horse (computing)

W

• Web shell
• Web skimming
• Web threat

X

• XML external entity attack
• XSS worm