aravindkumarsvg

Reflection & Related Concepts Cheat Sheet

What is Reflection?

Reflection allows a program to inspect and modify its own structure and behavior at runtime.

---

Reflection in Java

aravindkumarsvg

Insecure Deserialization & Gadget Chains — Cheat Sheet

Core Concept

Insecure deserialization occurs when untrusted data is deserialized into objects, allowing attackers to abuse object lifecycle methods and existing code paths (gadgets) to trigger unintended behavior such as RCE.

Attackers inject object graphs, not code.

---

Key Terms

aravindkumarsvg

🧭 Communications Between Windows, Documents & Contexts

📘 Comprehensive Developer & Security Cheatsheet

---

🧩 1. Overview

Modern web applications often require communication between multiple browsing contexts — windows, iframes, tabs, popups, or even workers.
The browser provides several APIs for this, each suited for different scenarios.

aravindkumarsvg

Iframe Developer Cheatsheet

A complete reference for HTML <iframe> properties, attributes, methods, and events.

---

🧩 HTML Attributes

Attribute	Description

aravindkumarsvg

URL Override & Forwarded Headers — Cheatsheet

Purpose: Quick reference for headers that can override or indicate original request URL/path/host/proto. Useful for VAPT, debugging reverse proxies, and hardening.

---

Common headers

• X-Original-URL — original path before rewrite (IIS, some middlewares)
• X-Rewrite-URL — original path used by IIS/mod_rewrite

aravindkumarsvg

LLM Security & VAPT Cheatsheet

---

APIs

Concept

APIs allow external applications or services to interact with the LLM, usually through REST or GraphQL endpoints.

aravindkumarsvg

JavaScript Quirks Cheatsheet

This document collects quirks, odd behaviors, and security-relevant details in JavaScript useful for VAPT engineers.

---

1. Regex vs Division Ambiguity

throw/1/;

aravindkumarsvg

📑 URI Schemes & Quirks Cheatsheet (for VAPT)

This cheatsheet summarizes URI schemes, their quirks, encoding tricks, and abuse potential.
Useful for a VAPT engineer’s quick recall.

---

1. Common Dangerous URI Schemes

| Scheme | Example | Quirks / Abuse Potential |

aravindkumarsvg

XML Ecosystem: Cheatsheet & Quirks

This document provides a high-level overview of major XML technologies. It's designed for developers who need a quick refresher on core concepts, common quirks, and practical examples.

1. XML (eXtensible Markup Language)

The foundation. A markup language that defines a set of rules for encoding documents in a format that is both human-readable and machine-readable.

Core Concepts

aravindkumarsvg

🛠️ HTML Quirks and XSS Cheat Sheet

A reference of quirks, behaviors, and security-relevant properties in HTML5 + SVG, useful for penetration testing, payload crafting, and filter bypass research.

---

HTML Elements Parsing quirks - link mXSS CheatSheet

---