vulnerabilities Cheat Sheet

[ Sql injection ]

https://sqlwiki.netspi.com/

https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet


https://www.owasp.org/index.php/Injection_Prevention_Cheat_Sheet

http://securityidiots.com


[Bypass WAF]

https://gist.github.com/cyberheartmi9/256df4b98af323fa96f182916f0e3d00



https://gist.github.com/cyberheartmi9/b4a4ff0f691be6b5c866450563258e86


[ XSS ] 

http://brutelogic.com.br


https://www.rafaybaloch.com/2017/06/breaking-great-wall-of-web-xss-waf.html


https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet


[ LFI & RFI ]

www.hackingarticles.in/5-ways-exploit-lfi-vulnerability/

https://www.rcesecurity.com/2017/08/from-lfi-to-rce-via-php-sessions/

https://medium.com/@p4c3n0g3/lfi-to-rce-via-access-log-injection-88684351e7c0

https://www.exploit-db.com/papers/12992/


https://highon.coffee/blog/lfi-cheat-sheet/


[ from lfi to rce ]

https://www.exploit-db.com/papers/12992/


[ Code injection ]


http://intx0x80.blogspot.com/2017/04/code-injection.html


[ command injection ]




https://www.exploit-db.com/docs/.../42593-command-injection---shell-injection.pdf



[ summary]

https://www.exploit-db.com/papers/12871/