21 web vuln | inject/misconfig/control/insecure/logic
==bug injection==
#html injection
#cross site scripting
#cross site request forgery
#os command injection
#sql injection
#remote code execution
==security misconfiguration==
#open port & service
#default password
#http header
#cors
#api
==broken access control==
#insecure direct object references
#privilege escalation
==insecure communication==
#insecure ssl/tls
#man in the middle
#insecure protocols
==business logic==
#inconsistent validation
#order processing
#price manipulation
==zero day==
#unpatched
#unknown
/////