> For the complete documentation index, see [llms.txt](https://notes.incendium.rocks/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.incendium.rocks/pentesting-notes/web.md).

# Web pentesting

- [Content Discovery](https://notes.incendium.rocks/pentesting-notes/web/content-discovery.md): Discovering content on the website is a important step in the reconnaissance phase of web pentesting.
- [Subdomain Enumeration](https://notes.incendium.rocks/pentesting-notes/web/subdomain-enumeration.md): We can find subdomains of websites using various techniques.
- [Authentication bypass](https://notes.incendium.rocks/pentesting-notes/web/authentication-bypass.md)
- [IDOR (Insecure Direct Object Reference)](https://notes.incendium.rocks/pentesting-notes/web/idor-insecure-direct-object-reference.md): Insecure Direct Object Reference
- [Git repository](https://notes.incendium.rocks/pentesting-notes/web/git-repository.md): Found a .git folder? Good!
- [XSS](https://notes.incendium.rocks/pentesting-notes/web/xss.md)
- [SSRF](https://notes.incendium.rocks/pentesting-notes/web/ssrf.md)
- [CSRF](https://notes.incendium.rocks/pentesting-notes/web/csrf.md)
- [Injection](https://notes.incendium.rocks/pentesting-notes/web/injection.md)
- [SQL Injection](https://notes.incendium.rocks/pentesting-notes/web/injection/sql-injection.md)
- [Cypher injection](https://notes.incendium.rocks/pentesting-notes/web/injection/cypher-injection.md)
- [Command injection](https://notes.incendium.rocks/pentesting-notes/web/injection/command-injection.md)
- [Server Side Template Injection](https://notes.incendium.rocks/pentesting-notes/web/injection/server-side-template-injection.md)
- [NoSQL injection](https://notes.incendium.rocks/pentesting-notes/web/injection/nosql-injection.md)
- [XXE](https://notes.incendium.rocks/pentesting-notes/web/injection/xxe.md)
- [FI (File Inclusion)](https://notes.incendium.rocks/pentesting-notes/web/fi-file-inclusion.md)
- [File upload](https://notes.incendium.rocks/pentesting-notes/web/file-upload.md)
- [OAuth](https://notes.incendium.rocks/pentesting-notes/web/oauth.md)
- [JWT](https://notes.incendium.rocks/pentesting-notes/web/jwt.md)
- [CORS](https://notes.incendium.rocks/pentesting-notes/web/cors.md)
- [Prototype pollution](https://notes.incendium.rocks/pentesting-notes/web/prototype-pollution.md)
- [Request Smuggling](https://notes.incendium.rocks/pentesting-notes/web/request-smuggling.md)
- [Offensive AI testing](https://notes.incendium.rocks/pentesting-notes/web/offensive-ai-testing.md)
- [Reconnaissance](https://notes.incendium.rocks/pentesting-notes/web/offensive-ai-testing/reconnaissance.md)
- [Attacking agents](https://notes.incendium.rocks/pentesting-notes/web/offensive-ai-testing/attacking-agents.md)
- [Attacking Multi-Agent Systems](https://notes.incendium.rocks/pentesting-notes/web/offensive-ai-testing/attacking-multi-agent-systems.md)
- [Attacking RAG-pipelines](https://notes.incendium.rocks/pentesting-notes/web/offensive-ai-testing/attacking-rag-pipelines.md)
- [Attacking Embeddings](https://notes.incendium.rocks/pentesting-notes/web/offensive-ai-testing/attacking-embeddings.md)
- [Attacking MCP & tools](https://notes.incendium.rocks/pentesting-notes/web/offensive-ai-testing/attacking-mcp-and-tools.md)