> For the complete documentation index, see [llms.txt](https://docs.pabloarrabal.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pabloarrabal.com/explotacion/vulnerabilidades.md).

# Vulnerabilidades

- [SQL Injection (SQLi)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli.md)
- [PortSwigger Lab 1](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli/portswigger-lab-1.md): Resolución del 1º laboratorio de SQLi de PortSwigger
- [PortSwigger Lab 2](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli/portswigger-lab-2.md): Resolución del 2º laboratorio de SQLi de PortSwigger
- [PortSwigger Lab 3](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli/portswigger-lab-3.md): Resolución del 3º laboratorio de SQLi de PortSwigger. SQL injection UNION attack, determining the number of columns returned by the query
- [PortSwigger Lab 4](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli/portswigger-lab-4.md): Resolución del 4º laboratorio de SQL injection UNION attack, finding a column containing text
- [PortSwigger Lab 5](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli/portswigger-lab-5.md): Resolución del 5º laboratorio de SQL injection UNION attack, retrieving data from other tables
- [PortSwigger Lab 6](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli/portswigger-lab-6.md): Resolución del 6º laboratorio de SQL injection UNION attack, retrieving multiple values in a single column
- [PortSwigger Lab 7](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli/portswigger-lab-7.md): Resolución del 7º laboratorio de SQL injection attack, querying the database type and version on MySQL and Microsoft
- [PortSwigger Lab 8](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/sql-injection-sqli/portswigger-lab-8.md): Resolución del 8º laboratorio de SQL injection attack, listing the database contents on non-Oracle databases
- [Cross-Site Scripting (XSS)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/cross-site-scripting-xss.md)
- [XML External Entity Injection (XXE)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/xml-external-entity-injection-xxe.md)
- [Local File Inclusion (LFI)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/local-file-inclusion-lfi.md)
- [LFI -> RCE](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/local-file-inclusion-lfi/lfi-greater-than-rce.md)
- [Remote File Inclusion (RFI)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/remote-file-inclusion-rfi.md)
- [Log Poisoning](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/log-poisoning.md)
- [Cross-Sise Request Forgery (CSRF)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/cross-sise-request-forgery-csrf.md)
- [Server-Site Request Forgery (SSRF)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/server-site-request-forgery-ssrf.md)
- [Server-Side Template Injection (SSTI)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/server-side-template-injection-ssti.md)
- [Client-Side Template Injection (CSTI)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/client-side-template-injection-csti.md)
- [Padding Oracle Attack (POO)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/padding-oracle-attack-poo.md)
- [Type Juggling Attack](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/type-juggling-attack.md)
- [NoSQL Injection (NoSQLi)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/nosql-injection-nosqli.md)
- [LDAP Injection (LDAPi)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/ldap-injection-ldapi.md)
- [Deserialization Attack](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/deserialization-attack.md)
- [LaTeX Injection (LaTeXi)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/latex-injection-latexi.md)
- [API Abusing](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/api-abusing.md)
- [File Uploading Abusing](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/file-uploading-abusing.md)
- [Prototype Pollution](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/prototype-pollution.md)
- [Domain Zone Transfer Attack (AXFR)](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/domain-zone-transfer-attack-axfr.md)
- [Mass-Asignment Attack / Parameter Binding](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/mass-asignment-attack-parameter-binding.md)
- [Open Redirect](https://docs.pabloarrabal.com/explotacion/vulnerabilidades/open-redirect.md)