Injection

Techniques

Workflow

1. Identify injection points (parameters, headers, cookies, JSON fields)
2. Detect injection type with minimal probes
3. Exploit with context-appropriate payloads
4. Escalate (data extraction, RCE, file read)
5. Capture evidence and write PoC

Reference

• reference/sql-injection*.md

  - SQL injection techniques

• reference/nosql-injection*.md

  - NoSQL injection techniques

• reference/os-command-injection*.md

  - OS command injection

• reference/ssti*.md

  - Server-side template injection

• reference/xxe*.md

  - XML external entity injection