Skip to content
HackIndex.io

HTTP/HTTPS:

Vulnerability Discovery

Web vuln checks: XSS, SQLi, SSRF, XXE, IDOR, JWT, and more

27 guides • 2 steps • Created Dec 28, 2025 • Updated Mar 29, 2026
27 guides

Access Control Testing

Tests HTTP/HTTPS endpoints for broken access control flaws, including privilege escalation, IDOR, and unauthorized resource access across authentication boundaries.

Sep 13, 2026 • 6 min read

Authentication Vulnerability Testing

Tests HTTP/HTTPS authentication mechanisms for weaknesses including brute force, credential stuffing, session fixation, and broken auth logic flaws.

Sep 13, 2026 • 6 min read

Check Exposed .git Directory

Detect exposed .git directories on web servers that may leak source code, credentials, and project history via misconfigured web root deployments.

Jan 23, 2026 • 3 min read

Command Injection Detection

Detect command injection vulnerabilities in HTTP/HTTPS services by identifying unsanitized input points that allow OS command execution on the target server.

Mar 28, 2026 • 4 min read

CORS Misconfiguration Testing

Techniques for identifying CORS misconfigurations by probing Origin validation, wildcard usage, and credential exposure in cross-origin HTTP responses.

Mar 28, 2026 • 4 min read

CSP Check

Analyze Content-Security-Policy headers to identify misconfigurations, unsafe directives, and bypasses that expose applications to XSS and injection attacks.

Sep 13, 2026 • 5 min read

CSRF Detection

Identifies Cross-Site Request Forgery vulnerabilities by testing CSRF token implementation, SameSite cookie attributes, and origin validation in HTTP requests.

Sep 13, 2026 • 5 min read

Directory Traversal Detection

Detect directory traversal vulnerabilities in web apps by testing path manipulation sequences (../), identifying improper input sanitisation and unauthorised file access.

Sep 13, 2026 • 7 min read

DOM-Based XSS Checks

Identifies DOM-based XSS vulnerabilities by analyzing client-side JavaScript for unsafe sink usage, taint flows from user-controlled sources, and missing output encoding.

Sep 13, 2026 • 6 min read
2 steps

File inclusion

Discover Local and Remote File Inclusion vulnerabilities in web apps by testing path traversal, null bytes, and URL-based payloads via HTTP parameters.

Jan 26, 2026 • 6 min read

GraphQL Security Testing

Discover GraphQL-specific vulnerabilities including introspection abuse, query depth attacks, batching exploits, and injection flaws in HTTP-based API endpoints.

Sep 14, 2026 • 3 min read

IDOR Testing by Parameter Tampering

Discover IDOR vulnerabilities by manipulating HTTP parameters, path values, and object references to access unauthorized resources across API endpoints and web functions.

Jan 23, 2026 • 3 min read

Information Disclosure Checks

Identifies unintended data exposure via HTTP responses, headers, error messages, and server banners that may reveal sensitive system or application details.

Sep 13, 2026 • 10 min read

JWT Vulnerability Testing

Discover and exploit JWT flaws including weak secrets, algorithm confusion (alg:none, RS256→HS256), claim manipulation, and key injection attacks.

Mar 28, 2026 • 3 min read

Source Map Exposure

Identifies exposed JavaScript source maps via .map files, revealing original source code, file structure, and comments unintended for production.

Apr 1, 2026 • 7 min read

SQL Injection Detection

Detect SQL injection vulnerabilities in HTTP/HTTPS services using manual probing, automated scanning, and error-based analysis techniques.

Mar 28, 2026 • 5 min read

SSTI Detection

Detect Server-Side Template Injection vulnerabilities by probing template engines with polyglot payloads, analysing error responses, and confirming execution via mathematical expression rendering.

Mar 28, 2026 • 3 min read

Stored XSS Checks

Identifies stored XSS vulnerabilities in HTTP/HTTPS services by testing persistent script injection points across forms, APIs, and user-controlled data storage fields.

Mar 28, 2026 • 5 min read

Weak Random Token Generation

Identifies weak PRNG usage in token/session generation via HTTP traffic analysis, focusing on entropy flaws, predictable seeds, and statistical pattern testing.

Sep 13, 2026 • 5 min read

Web vulnerability discovery is the systematic process of finding exploitable weaknesses in a web application. This goes beyond running a scanner. It means testing every input for injection (SQL, command, LDAP, XPath), fuzzing parameters with tools like ffuf and Burp Intruder, and probing authentication and session management for logic flaws.

Access control testing checks whether horizontal and vertical privilege escalation is possible by manipulating IDs, roles, or request parameters. Business logic testing targets flaws that automated tools miss entirely: race conditions, price manipulation, workflow bypasses, and multi-step process abuse.

The subpages cover manual and automated techniques for identifying injection points, testing authentication mechanisms, mapping access control boundaries, and discovering the application-specific vulnerabilities that generic scanners overlook.