web2-vuln-classes

Common web2 vulnerability classes include IDOR, XSS, SSRF, SQLi, and OAuth misconfigurations. A comprehensive taxonomy maps 18 distinct web2 bug classes with root causes, detection patterns, and real paid examples to accelerate security testing.

To classify recon findings, map discovered attack surfaces to 18 web2 vulnerability classes. Review the specific root causes and detection patterns for each class to systematically identify and categorize potential security issues during bug hunting.

Yes, the taxonomy covers API misconfigurations and GraphQL vulnerabilities. It includes detection patterns, root causes, and bypass techniques for these modern web2 attack surfaces alongside traditional classes like SQLi and broken authentication.

File upload bypass techniques are documented as part of the 18 web2 vulnerability classes. The taxonomy provides practical guidance on root causes, specific bypass methods, chaining opportunities, and real-world paid examples to illustrate exploit impact.

Yes, LLM and AI risks are included as a specific web2 vulnerability class. The reference provides root causes, detection patterns, and real-world examples to help security researchers study and test AI-integrated attack surfaces.

The taxonomy details chaining opportunities for vulnerabilities like HTTP smuggling and cache poisoning. By reviewing root causes and detection patterns, researchers can identify how to combine these web2 exploit techniques for greater impact.