Navigation
Vulnerabilites
Integer overflow: Vulnerabilities, attacks & examples
Password reset poisoning
Buffer overflow
Insecure direct object references (IDOR)
Directory listing: vulnerabilities & risks explained
JSON injection
Email injection
NoSQL injection
HTML injection
CRLF injection
Remote file inclusion (RFI)
SQL injection (SQLi): Prevention, examples & attacks
Cross-site request forgery (CSRF)
OS command injection: Payloads, prevention & attacks
Server-side request forgery (SSRF): Attack types & risks
Directory traversal
Cross-site scripting (XSS): Payloads & vulnerability guide
Unvalidated redirects and forwards
XML external entity (XXE) injection: Attacks & examples
Local file inclusion (LFI)
Remote code execution (RCE): Payloads, commands & vulnerabilities
Attacks
SEO poisoning
Broken link hijacking (BLH)
High orbit ion cannon (HOIC)
R.U.D.Y. attack
Slowloris DDoS attack: Detection & mitigation
XSS filter evasion
Host header attacks
Web cache poisoning: Attacks & vulnerabilities explained
Source code disclosure
Cookie poisoning
Forced browsing
Cookie hijacking
Session prediction
Session hijacking: Detection, defense & prevention
Session fixation: Attacks, vulnerabilities & prevention
Web shell
Privilege escalation
Reverse shell
Cross-frame scripting (XFS)
Low Orbit Ion Cannon (LOIC)
Clickjacking
Man-in-the-middle attacks (MITM)
Protection
HTTP strict transport security (HSTS): Examples, misconfigurations & fixes
Same-origin policy (SOP)
Cookie security flags
Tools
Web asset discovery
Web application firewall (WAF)
Vulnerability assessment
Software composition analysis (SCA)
What is DAST? A guide to dynamic application security testing
SAST: Static application security testing tools & solutions
Vulnerability management
Interactive application security testing (IAST) tools
About Invicti Learn

Welcome to Invicti Learn

Invicti Learn is your one-stop-shop for all information on web application security. We aim to provide you with all the information necessary to understand the nature of web vulnerabilities, as well as to know how to detect, avoid, and mitigate them.

Vulnerabilities

Understand, detect, prevent, and mitigate security risks

Attacks

Recognize attacks and the best ways to defend against them

Protection

Prevent vulnerabilities by securely configuring your web applications

Tools

Identify the right tools to handle web application security issues

Invicti Learn is all about cybersecurity education—but why not make learning fun? The Helix Files: Choose Your Own Adventure is a unique educational game set in a dystopian future. Join the resistance and help them build an app to change the future of humanity. Do you have what it takes? Join The Helix today!