Kod va skript inksiyasi
48 ta dars🔴DARS 01
XSS — skript inksiyasi
innerHTML orqali kod bajarish
💉DARS 02
SQL Injection
Ma'lumot bazasiga so'rov buzish
💉DARS 03
NoSQL Injection
MongoDB operatorlarini suiiste'mol
💥DARS 04
Command Injection
Serverda buyruq bajarish (RCE)
🎯DARS 05
SSTI — shablon inksiyasi
Shablon tizimi orqali kod
📄DARS 07
XXE — XML tashqi obyekt
XML orqali fayl o'qish
📦DARS 11
Deserialization
Obyekt orqali kod bajarish
🧬DARS 30
Prototype Pollution
JS obyektining asosini buzish
Server va tarmoq
42 ta dars🌐DARS 06
SSRF — server orqali so'rov
Ichki tarmoqqa kirish
📂DARS 08
Path Traversal
Serverdan tashqariga chiqish
📤DARS 10
Fayl yuklash zaifliklari
Zararli fayl yuklab RCE
🚚DARS 31
HTTP Request Smuggling
Ikki so'rovni bitta qilish
🖥DARS 23
Host Header Injection
Sarlavha orqali domen
⏎DARS 24
CRLF Injection
Yangi sarlavha kiritish
🔌DARS 35
Port skanlash (nmap)
Ochiq portlarni aniqlash
Autentifikatsiya
54 ta dars⚙️DARS 12
Mass Assignment
O'z rolini o'zgartirish
🎫DARS 13
JWT — alg:none
Imzosiz token bilan kirish
🎫DARS 14
JWT — rol ko'tarish
Token roliga ishonish
🍪DARS 15
Session Fixation
Sessiyani majburlash
🔐DARS 16
2FA ni chetlab o'tish
Ikki bosqichli himoyani o'tkazish
📱DARS 37
MFA chuqurligi
Replay, window, backup codes
🔗DARS 36
OAuth / OIDC zaifliklari
state, redirect_uri, token
🔑DARS 17
Parol tiklash orqali ATO
Parolsiz begona hisobga kirish
💦DARS 32
Password Spraying
Ko'p hisobga bitta parol
Kirish nazorati
24 ta darsBrauzer va mijoz
36 ta dars🌍DARS 22
CORS noto'g'ri sozlanishi
Boshqa saytdan API olish
↪️DARS 21
Open Redirect
Boshqa saytga yo'naltirish
🖱DARS 25
Clickjacking
iframe orqali tegishni o'g'irlash
◈DARS 29
GraphQL zaifliklari
Introspection, batch, injection
💾DARS 26
Cache Poisoning
Keshdagi javobni almashtirish
⚡DARS 28
Race Condition
Parallel so'rov bilan