Top 100 Web Vulnerabilities Reference

Catalog 100 critical web application vulnerabilities with impacts and remediation guidance.

Updated Jan 15, 2026
One-click install
npx skills add https://github.com/lips85/antigravity-skills-bootstrap --skill top-100-web-vulnerabilities-reference-lips85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Top 100 Web Vulnerabilities Reference
Source: https://github.com/lips85/antigravity-skills-bootstrap/tree/main/skills/top-web-vulnerabilities
Command: npx skills add https://github.com/lips85/antigravity-skills-bootstrap --skill top-100-web-vulnerabilities-reference-lips85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive reference for understanding, identifying, and mitigating the top 100 web application vulnerabilities, enabling robust security assessments.

Core Features & Use Cases

  • Vulnerability Catalog: Detailed definitions, root causes, impacts, and mitigations for 100+ web vulnerabilities.
  • Categorized Threats: Organized by injection, access control, API security, and more for systematic analysis.
  • Use Case: A security analyst needs to understand the risks associated with insecure direct object references (IDOR) and how to prevent them. They can use this Skill to get a detailed explanation, examples, and mitigation strategies.

Quick Start

Use the top web vulnerabilities reference skill to explain SQL injection and its mitigation strategies.

Frequently Asked Questions about Top 100 Web Vulnerabilities Reference

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What are the most critical web application vulnerabilities and how do I identify them?

The most critical web application vulnerabilities include injection, authentication flaws, data exposure, misconfiguration, and API security risks. You can identify them systematically by referencing a categorized catalog of top vulnerabilities to understand their root causes and impacts.

How do I mitigate SQL injection and other common web security threats?

To mitigate SQL injection and similar web security threats, apply secure coding practices outlined in vulnerability references, which provide specific remediation strategies and prevention techniques tailored to each categorized threat type.

Does this web security reference cover API security and SSRF threats?

Yes, this web security reference covers API security and Server-Side Request Forgery (SSRF) threats. It organizes these vulnerabilities systematically to enable thorough impact assessment and targeted remediation.

What do I need to know to effectively use a web vulnerability reference for penetration testing?

Effective use of a web vulnerability reference for penetration testing requires a solid understanding of web architecture and security principles. This foundational knowledge enables accurate vulnerability identification and impact assessment.

How can I find remediation guidance for insecure direct object references?

You can find remediation guidance for insecure direct object references (IDOR) by consulting a structured vulnerability catalog. It provides detailed explanations, examples, and mitigation strategies to prevent access control breaches.

When should I use a categorized vulnerability catalog instead of general secure coding guidelines?

Use a categorized vulnerability catalog instead of general secure coding guidelines when you need to systematically identify specific threats like injection or API security risks and require detailed, targeted remediation guidance for each vulnerability.