Web Attack Exploitation Techniques

#Overview

This section covers exploitation techniques for web application vulnerabilities commonly encountered during penetration testing. Each technique file provides deep-dive coverage of a specific attack class: detection methods, exploitation commands, filter bypasses, OPSEC considerations, and post-exploitation value. Commands and techniques are drawn from real Hack The Box machines.

#Attack Type Decision Tree

Web Application Identified
    |
    += User Input Reflected? --> XSS (xss-exploitation.md)
    |
    += File Upload Present? --> File Upload Attacks (file-upload-attacks.md)
    |
    += Login/Auth Forms? --> SQL Injection (sql-injection.md)
    |                         Command Injection (command-injection.md)
    |                         CMS Exploitation (cms-exploitation.md)
    |
    += URL Parameters with file paths? --> LFI/RFI (local-file-inclusion.md)
    |
    += API Endpoints (REST/GraphQL)? --> SQL Injection, GraphQL Attacks
    |                                    Deserialization (deserialization-attacks.md)
    |                                    SSRF (server-side-request-forgery.md)
    |
    += Template Rendering ({{ }})? --> SSTI (template-injection-ssti.md)
    |
    += XML Parsing? --> XXE (xml-external-entity-xxe.md)
    |
    += .git directory exposed? --> Git Repository (git-repository-exposure.md)
    |
    += CMS Identified? --> CMS Exploitation (cms-exploitation.md)
    |
    += Serialized Objects? --> Deserialization (deserialization-attacks.md)
    |
    += URL Fetching / Webhooks? --> SSRF (server-side-request-forgery.md)

TEXT

#Technique Files

#	Technique	Complexity	File
1	SQL Injection	Advanced	sql-injection.md
2	Local File Inclusion	Intermediate	local-file-inclusion.md
3	File Upload Attacks	Intermediate	file-upload-attacks.md
4	XSS Exploitation	Intermediate	xss-exploitation.md
5	Command Injection	Intermediate	command-injection.md
6	Server-Side Request Forgery	Intermediate	server-side-request-forgery.md
7	Deserialization Attacks	Advanced	deserialization-attacks.md
8	Template Injection (SSTI)	Intermediate	template-injection-ssti.md
9	XML External Entity (XXE)	Intermediate	xml-external-entity-xxe.md
10	CMS Exploitation	Intermediate	cms-exploitation.md
11	GraphQL API Attacks	Basic	graphql-api-attacks.md
12	Git Repository Exposure	Basic	git-repository-exposure.md

#General Workflow

Enumerate the web application using directory brute-force, parameter discovery, and technology fingerprinting. See ../../03-enumeration/web-enumeration.md for methodology.
Identify the vulnerability class from the decision tree above.
Consult the relevant technique file for exploitation steps.
Escalate initial access to a full reverse shell using the foothold methods described.
Document all findings for the final report.

#Cross-References

#Tool References

Tool	Link
Burp Suite	https://portswigger.net/burp
sqlmap	https://sqlmap.org
ffuf	https://github.com/ffuf/ffuf
wfuzz	https://github.com/xmendez/wfuzz
Caido	https://caido.io