AuraCorp Society

# Injection SQL_INJECTION = "SQL Injection" COMMAND_INJECTION = "Command Injection" XSS = "Cross-Site Scripting" SSTI = "Server-Side Template Injection" XPATH_INJECTION = "XPath Injection" LDAP_INJECTION = "LDAP Injection" NO_SQL_INJECTION = "NoSQL Injection" HTML_INJECTION = "HTML Injection" # File & Path LFI = "Local File Inclusion" RFI = "Remote File Inclusion" PATH_TRAVERSAL = "Path Traversal" FILE_UPLOAD = "Unrestricted File Upload" ZIP_SLIP = "Zip Slip" # Server-Side RCE = "Remote Code Execution" SSRF = "Server-Side Request Forgery" XXE = "XML External Entity" HTTP_REQUEST_SMUGGLING = "HTTP Request Smuggling" DESERIALIZATION = "Insecure Deserialization" LOG_INJECTION = "Log Injection" # Authentication & Session AUTH_BYPASS = "Authentication Bypass" JWT_NONE_ALG = "JWT None Algorithm" JWT_WEAK_KEY = "JWT Weak Key" SESSION_FIXATION = "Session Fixation" PRIVILEGE_ESCALATION = "Privilege Escalation" # Authorization IDOR = "Insecure Direct Object Reference" BFLA = "Broken Function Level Authorization" BAC = "Broken Access Control" # Web / Client-Side OPEN_REDIRECT = "Open Redirect" CLICKJACKING = "Clickjacking" CORS_MISCONFIG = "CORS Misconfiguration" CSP_BYPASS = "Content Security Policy Bypass" # Infrastructure & Cloud SUBDOMAIN_TAKEOVER = "Subdomain Takeover" S3_BUCKET_TAKEOVER = "S3 Bucket Takeover" CLOUD_METADATA = "Cloud Metadata Exposure" CONTAINER_ESCAPE = "Container Escape" # Network & Protocol CRLF_INJECTION = "CRLF Injection" HOST_HEADER = "Host Header Injection" DNS_REBINDING = "DNS Rebinding" CACHE_POISONING = "Web Cache Poisoning" # API Specific MASS_ASSIGNMENT = "Mass Assignment" API_INFO_LEAK = "API Information Disclosure" GRAPHQL_INJECTION = "GraphQL Injection" # General INFO_LEAK = "Information Disclosure" XXS_SEARCH = "Reflected Cross-Site Scripting" STORED_XSS = "Stored Cross-Site Scripting" DOM_XSS = "DOM-based Cross-Site Scripting" DIRECTORY_LISTING = "Directory Listing"