Server Security Misconfiguration
<div class="subcategories-list active"><div><li class="subCategory">Unsafe Cross-Origin Resource Sharing</li><ul><!-- react-text: 1742 --> <!-- /react-text --></ul></div><div><li class="subCategory">Path Traversal</li><ul><!-- react-text: 1746 --> <!-- /react-text --></ul></div><div><li class="subCategory">Directory Listing Enabled</li><ul><!-- react-text: 1750 --> <!-- /react-text --><li class="variant"><span>Sensitive Data Exposure</span></li><li class="variant"><span>Non-Sensitive Data Exposure</span></li></ul></div><div><li class="subCategory">Same-Site Scripting</li><ul><!-- react-text: 1758 --> <!-- /react-text --></ul></div><div><li class="subCategory">SSL Attack (BREACH, POODLE etc.)</li><ul><!-- react-text: 1762 --> <!-- /react-text --></ul></div><div><li class="subCategory active">Using Default Credentials</li><ul><!-- react-text: 1766 --> <!-- /react-text --><li class="variant"><span>Production Server</span></li><li class="variant active"><span>Staging/Development Server</span></li></ul></div><div><li class="subCategory">Misconfigured DNS</li><ul><!-- react-text: 1774 --> <!-- /react-text --><li class="variant"><span>Subdomain Takeover</span></li><li class="variant"><span>Zone Transfer</span></li><li class="variant"><span>Missing Certification Authority Authorization (CAA) Record</span></li></ul></div><div><li class="subCategory">Mail Server Misconfiguration</li><ul><!-- react-text: 1784 --> <!-- /react-text --><li class="variant"><span>Missing SPF on Email Domain</span></li><li class="variant"><span>Email Spoofable Via Third-Party API Misconfiguration</span></li><li class="variant"><span>Missing SPF on Non-Email Domain</span></li><li class="variant"><span>SPF Uses a Soft Fail</span></li><li class="variant"><span>SPF Includes More Than 10 Lookups</span></li><li class="variant"><span>Missing DKIM/DMARC</span></li></ul></div><div><li class="subCategory">Lack of Password Confirmation</li><ul><!-- react-text: 1800 --> <!-- /react-text --><li class="variant"><span>Change Email Address</span></li><li class="variant"><span>Change Password</span></li><li class="variant"><span>Delete Account</span></li><li class="variant"><span>Manage 2FA</span></li></ul></div><div><li class="subCategory">No Rate Limiting on Form</li><ul><!-- react-text: 1812 --> <!-- /react-text --><li class="variant"><span>Registration</span></li><li class="variant"><span>Login</span></li><li class="variant"><span>Email-Triggering</span></li></ul></div><div><li class="subCategory">Unsafe File Upload</li><ul><!-- react-text: 1822 --> <!-- /react-text --><li class="variant"><span>No Antivirus</span></li><li class="variant"><span>No Size Limit</span></li><li class="variant"><span>File Extension Filter Bypass</span></li></ul></div><div><li class="subCategory">Cookie Scoped to Parent Domain</li><ul><!-- react-text: 1832 --> <!-- /react-text --></ul></div><div><li class="subCategory">Missing Secure or HTTPOnly Cookie Flag</li><ul><!-- react-text: 1836 --> <!-- /react-text --><li class="variant"><span>Session Token</span></li><li class="variant"><span>Non-Session Cookie</span></li></ul></div><div><li class="subCategory">Clickjacking</li><ul><!-- react-text: 1844 --> <!-- /react-text --><li class="variant"><span>Sensitive Action</span></li><li class="variant"><span>Non-Sensitive Action</span></li></ul></div><div><li class="subCategory">OAuth Misconfiguration</li><ul><!-- react-text: 1852 --> <!-- /react-text --><li class="variant"><span>Missing State Parameter</span></li></ul></div><div><li class="subCategory">Captcha Bypass</li><ul><!-- react-text: 1858 --> <!-- /react-text --><li class="variant"><span>Implementation Vulnerability</span></li><li class="variant"><span>Brute Force</span></li></ul></div><div><li class="subCategory">Exposed Admin Portal</li><ul><!-- react-text: 1866 --> <!-- /react-text --><li class="variant"><span>To Internet</span></li></ul></div><div><li class="subCategory">Missing DNSSEC</li><ul><!-- react-text: 1872 --> <!-- /react-text --></ul></div><div><li class="subCategory">Fingerprinting/Banner Disclosure</li><ul><!-- react-text: 1876 --> <!-- /react-text --></ul></div><div><li class="subCategory">Username Enumeration</li><ul><!-- react-text: 1880 --> <!-- /react-text --><li class="variant"><span>Brute Force</span></li></ul></div><div><li class="subCategory">Potentially Unsafe HTTP Method Enabled</li><ul><!-- react-text: 1886 --> <!-- /react-text --><li class="variant"><span>OPTIONS</span></li><li class="variant"><span>TRACE</span></li></ul></div><div><li class="subCategory">Insecure SSL</li><ul><!-- react-text: 1894 --> <!-- /react-text --><li class="variant"><span>Lack of Forward Secrecy</span></li><li class="variant"><span>Insecure Cipher Suite</span></li></ul></div><div><li class="subCategory">Reflected File Download (RFD)</li><ul><!-- react-text: 1902 --> <!-- /react-text --></ul></div><div><li class="subCategory">Lack of Security Headers</li><ul><!-- react-text: 1906 --> <!-- /react-text --><li class="variant"><span>X-Frame-Options</span></li><li class="variant"><span>Cache-Control for a Non-Sensitive Page</span></li><li class="variant"><span>X-XSS-Protection</span></li><li class="variant"><span>Strict-Transport-Security</span></li><li class="variant"><span>X-Content-Type-Options</span></li><li class="variant"><span>Content-Security-Policy</span></li><li class="variant"><span>Public-Key-Pins</span></li><li class="variant"><span>X-Content-Security-Policy</span></li><li class="variant"><span>X-Webkit-CSP</span></li><li class="variant"><span>Content-Security-Policy-Report-Only</span></li><li class="variant"><span>Cache-Control for a Sensitive Page</span></li></ul></div><div><li class="subCategory">Bitsquatting</li><ul><!-- react-text: 1932 --> <!-- /react-text --></ul></div></div>
<br><br><br>SPVREDDY
Server-Side Injection
<div class="col-xs-6 subcategories"><p class="help-block">Select a high-level classification on the left, or use the search function to specify the vulnerability name and variant of your exploit.</p><div class="subcategories-list active"><div><li class="subCategory">File Inclusion</li><ul><!-- react-text: 1936 --> <!-- /react-text --><li class="variant"><span>Local</span></li></ul></div><div><li class="subCategory">Parameter Pollution</li><ul><!-- react-text: 1942 --> <!-- /react-text --><li class="variant"><span>Social Media Sharing Buttons</span></li></ul></div><div><li class="subCategory">Remote Code Execution (RCE)</li><ul><!-- react-text: 1948 --> <!-- /react-text --></ul></div><div><li class="subCategory active">SQL Injection</li><ul><!-- react-text: 1952 --> <!-- /react-text --><li class="variant"><span>Error-Based</span></li><li class="variant"><span>Blind</span></li></ul></div><div><li class="subCategory">XML External Entity Injection (XXE)</li><ul><!-- react-text: 1960 --> <!-- /react-text --></ul></div><div><li class="subCategory">HTTP Response Manipulation</li><ul><!-- react-text: 1964 --> <!-- /react-text --><li class="variant"><span>Response Splitting (CRLF)</span></li></ul></div><div><li class="subCategory">Content Spoofing</li><ul><!-- react-text: 1970 --> <!-- /react-text --><li class="variant"><span>iframe Injection</span></li><li class="variant"><span>External Authentication Injection</span></li><li class="variant"><span>Email HTML Injection</span></li><li class="variant"><span>Text Injection</span></li><li class="variant"><span>Homograph/IDN-Based</span></li></ul></div></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Broken Authentication and Session Management
<div class="col-xs-6 subcategories"><p class="help-block">Select a high-level classification on the left, or use the search function to specify the vulnerability name and variant of your exploit.</p><div class="subcategories-list active"><div><li class="subCategory">Authentication Bypass</li><ul><!-- react-text: 1732 --> <!-- /react-text --></ul></div><div><li class="subCategory">Privilege Escalation</li><ul><!-- react-text: 1736 --> <!-- /react-text --></ul></div><div><li class="subCategory">Weak Login Function</li><ul><!-- react-text: 1740 --> <!-- /react-text --><li class="variant"><span>Over HTTP</span></li></ul></div><div><li class="subCategory">Session Fixation</li><ul><!-- react-text: 1746 --> <!-- /react-text --></ul></div><div><li class="subCategory">Failure to Invalidate Session</li><ul><!-- react-text: 1750 --> <!-- /react-text --><li class="variant"><span>On Logout</span></li><li class="variant"><span>On Password Reset</span></li><li class="variant"><span>On Password Change</span></li><li class="variant"><span>All Sessions</span></li><li class="variant"><span>On Email Change</span></li><li class="variant"><span>Long Timeout</span></li></ul></div><div><li class="subCategory">Concurrent Logins</li><ul><!-- react-text: 1766 --> <!-- /react-text --></ul></div><div><li class="subCategory">Weak Registration Implementation</li><ul><!-- react-text: 1770 --> <!-- /react-text --><li class="variant"><span>Over HTTP</span></li></ul></div></div></div>
<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Sensitive Data Exposure
<div class="subcategories-list active"><div><li class="subCategory">Critically Sensitive Data</li><ul><!-- react-text: 4176 --> <!-- /react-text --><li class="variant"><span>Password Disclosure</span></li><li class="variant"><span>Private API Keys</span></li></ul></div><div><li class="subCategory">EXIF Geolocation Data Not Stripped From Uploaded Images</li><ul><!-- react-text: 4184 --> <!-- /react-text --><li class="variant"><span>Automatic User Enumeration</span></li><li class="variant"><span>Manual User Enumeration</span></li></ul></div><div><li class="subCategory">Visible Detailed Error/Debug Page</li><ul><!-- react-text: 4192 --> <!-- /react-text --><li class="variant"><span>Detailed Server Configuration</span></li><li class="variant"><span>Full Path Disclosure</span></li><li class="variant"><span>Descriptive Stack Trace</span></li></ul></div><div><li class="subCategory">Disclosure of Known Public Information</li><ul><!-- react-text: 4202 --> <!-- /react-text --></ul></div><div><li class="subCategory">Token Leakage via Referer</li><ul><!-- react-text: 4206 --> <!-- /react-text --><li class="variant"><span>Trusted 3rd Party</span></li><li class="variant"><span>Untrusted 3rd Party</span></li><li class="variant"><span>Over HTTP</span></li></ul></div><div><li class="subCategory">Sensitive Token in URL</li><ul><!-- react-text: 4216 --> <!-- /react-text --></ul></div><div><li class="subCategory">Non-Sensitive Token in URL</li><ul><!-- react-text: 4220 --> <!-- /react-text --></ul></div><div><li class="subCategory">Weak Password Reset Implementation</li><ul><!-- react-text: 4224 --> <!-- /react-text --><li class="variant"><span>Password Reset Token Sent Over HTTP</span></li></ul></div><div><li class="subCategory">Mixed Content (HTTPS Sourcing HTTP)</li><ul><!-- react-text: 4230 --> <!-- /react-text --></ul></div><div><li class="subCategory">Sensitive Data Hardcoded</li><ul><!-- react-text: 4234 --> <!-- /react-text --><li class="variant"><span>OAuth Secret</span></li><li class="variant"><span>File Paths</span></li></ul></div><div><li class="subCategory">Internal IP Disclosure</li><ul><!-- react-text: 4242 --> <!-- /react-text --></ul></div><div><li class="subCategory">Cross Site Script Inclusion (XSSI)</li><ul><!-- react-text: 4246 --> <!-- /react-text --></ul></div><div><li class="subCategory">JSON Hijacking</li><ul><!-- react-text: 4250 --> <!-- /react-text --></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Cross-Site Scripting (XSS)
<div class="col-xs-6 subcategories"><p class="help-block">Select a high-level classification on the left, or use the search function to specify the vulnerability name and variant of your exploit.</p><div class="subcategories-list active"><div><li class="subCategory active">Stored</li><ul><!-- react-text: 2770 --> <!-- /react-text --><li class="variant"><span>Non-Admin to Anyone</span></li><li class="variant"><span>Admin to Anyone</span></li><li class="variant"><span>Self</span></li></ul></div><div><li class="subCategory">Reflected</li><ul><!-- react-text: 2780 --> <!-- /react-text --><li class="variant"><span>Non-Self</span></li><li class="variant"><span>Self</span></li></ul></div><div><li class="subCategory">Cookie-Based</li><ul><!-- react-text: 2788 --> <!-- /react-text --></ul></div><div><li class="subCategory">IE-Only</li><ul><!-- react-text: 2792 --> <!-- /react-text --><li class="variant"><span>Older Version (IE 10/11)</span></li><li class="variant"><span>XSS Filter Disabled</span></li><li class="variant"><span>Older Version (&lt; IE10)</span></li></ul></div><div><li class="subCategory">Referer</li><ul><!-- react-text: 2802 --> <!-- /react-text --></ul></div><div><li class="subCategory">TRACE Method</li><ul><!-- react-text: 2806 --> <!-- /react-text --></ul></div><div><li class="subCategory">Universal (UXSS)</li><ul><!-- react-text: 2810 --> <!-- /react-text --></ul></div><div><li class="subCategory">Off-Domain</li><ul><!-- react-text: 2814 --> <!-- /react-text --><li class="variant"><span>Data URI</span></li></ul></div></div></div>
<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Broken Access Control
<div class="subcategories-list active"><div><li class="subCategory">Insecure Direct Object References (IDOR)</li><ul><!-- react-text: 4678 --> <!-- /react-text --></ul></div><div><li class="subCategory active">Server-Side Request Forgery (SSRF)</li><ul><!-- react-text: 4682 --> <!-- /react-text --><li class="variant"><span>Internal</span></li><li class="variant"><span>External</span></li></ul></div><div><li class="subCategory">Username Enumeration</li><ul><!-- react-text: 4690 --> <!-- /react-text --><li class="variant"><span>Data Leak</span></li></ul></div><div><li class="subCategory">Exposed Sensitive Android Intent</li><ul><!-- react-text: 4696 --> <!-- /react-text --></ul></div><div><li class="subCategory">Exposed Sensitive iOS URL Scheme</li><ul><!-- react-text: 4700 --> <!-- /react-text --></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Cross-Site Request Forgery (CSRF)
<div class="subcategories-list active"><div><li class="subCategory">Application-Wide</li><ul><!-- react-text: 4704 --> <!-- /react-text --></ul></div><div><li class="subCategory active">Action-Specific</li><ul><!-- react-text: 4708 --> <!-- /react-text --><li class="variant"><span>Authenticated Action</span></li><li class="variant"><span>Unauthenticated Action</span></li><li class="variant"><span>Logout</span></li></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Application-Level Denial-of-Service (DoS)
<div class="subcategories-list active"><div><li class="subCategory">Critical Impact and/or Easy Difficulty</li><ul><!-- react-text: 5306 --> <!-- /react-text --></ul></div><div><li class="subCategory">High Impact and/or Medium Difficulty</li><ul><!-- react-text: 5310 --> <!-- /react-text --></ul></div><div><li class="subCategory">App Crash</li><ul><!-- react-text: 5314 --> <!-- /react-text --><li class="variant"><span>Malformed Android Intents</span></li><li class="variant"><span>Malformed iOS URL Schemes</span></li></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Unvalidated Redirects and Forwards
<div class="subcategories-list active"><div><li class="subCategory">Open Redirect</li><ul><!-- react-text: 5358 --> <!-- /react-text --><li class="variant"><span>GET-Based</span></li><li class="variant"><span>POST-Based</span></li><li class="variant"><span>Header-Based</span></li></ul></div><div><li class="subCategory">Tabnabbing</li><ul><!-- react-text: 5368 --> <!-- /react-text --></ul></div><div><li class="subCategory">Lack of Security Speed Bump Page</li><ul><!-- react-text: 5372 --> <!-- /react-text --></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
External Behavior
<div class="col-xs-6 subcategories"><p class="help-block">Select a high-level classification on the left, or use the search function to specify the vulnerability name and variant of your exploit.</p><div class="subcategories-list active"><div><li class="subCategory">Browser Feature</li><ul><!-- react-text: 5376 --> <!-- /react-text --><li class="variant"><span>Plaintext Password Field</span></li><li class="variant"><span>Save Password</span></li><li class="variant"><span>Autocomplete Enabled</span></li><li class="variant"><span>Autocorrect Enabled</span></li><li class="variant"><span>Aggressive Offline Caching</span></li></ul></div><div><li class="subCategory">CSV Injection</li><ul><!-- react-text: 5390 --> <!-- /react-text --></ul></div><div><li class="subCategory">Captcha Bypass</li><ul><!-- react-text: 5394 --> <!-- /react-text --><li class="variant"><span>Crowdsourcing</span></li></ul></div><div><li class="subCategory">System Clipboard Leak</li><ul><!-- react-text: 5400 --> <!-- /react-text --><li class="variant"><span>Shared Links</span></li></ul></div><div><li class="subCategory">User Password Persisted in Memory</li><ul><!-- react-text: 5406 --> <!-- /react-text --></ul></div></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Insufficient Security Configurability
<div class="col-xs-6 subcategories"><p class="help-block">Select a high-level classification on the left, or use the search function to specify the vulnerability name and variant of your exploit.</p><div class="subcategories-list active"><div><li class="subCategory active">Weak Password Policy</li><ul><!-- react-text: 5410 --> <!-- /react-text --></ul></div><div><li class="subCategory">No Password Policy</li><ul><!-- react-text: 5414 --> <!-- /react-text --></ul></div><div><li class="subCategory">Weak Password Reset Implementation</li><ul><!-- react-text: 5418 --> <!-- /react-text --><li class="variant"><span>Token is Not Invalidated After Use</span></li><li class="variant"><span>Token is Not Invalidated After Email Change</span></li><li class="variant"><span>Token is Not Invalidated After Password Change</span></li><li class="variant"><span>Token Has Long Timed Expiry</span></li><li class="variant"><span>Token is Not Invalidated After New Token is Requested</span></li></ul></div><div><li class="subCategory">Lack of Verification Email</li><ul><!-- react-text: 5432 --> <!-- /react-text --></ul></div><div><li class="subCategory">Lack of Notification Email</li><ul><!-- react-text: 5436 --> <!-- /react-text --></ul></div><div><li class="subCategory">Weak Registration Implementation</li><ul><!-- react-text: 5440 --> <!-- /react-text --><li class="variant"><span>Allows Disposable Email Addresses</span></li></ul></div><div><li class="subCategory">Weak 2FA Implementation</li><ul><!-- react-text: 5446 --> <!-- /react-text --><li class="variant"><span>Missing Failsafe</span></li></ul></div></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Using Components with Known Vulnerabilities
<div class="col-xs-6 subcategories"><p class="help-block">Select a high-level classification on the left, or use the search function to specify the vulnerability name and variant of your exploit.</p><div class="subcategories-list active"><div><li class="subCategory">Rosetta Flash</li><ul><!-- react-text: 5452 --> <!-- /react-text --></ul></div><div><li class="subCategory">Outdated Software Version</li><ul><!-- react-text: 5456 --> <!-- /react-text --></ul></div><div><li class="subCategory">Captcha Bypass</li><ul><!-- react-text: 5460 --> <!-- /react-text --><li class="variant"><span>OCR (Optical Character Recognition)</span></li></ul></div></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Insecure Data Storage
<div class="subcategories-list active"><div><li class="subCategory active">Sensitive Application Data Stored Unencrypted</li><ul><!-- react-text: 6226 --> <!-- /react-text --><li class="variant"><span>On External Storage</span></li><li class="variant"><span>On Internal Storage</span></li></ul></div><div><li class="subCategory">Server-Side Credentials Storage</li><ul><!-- react-text: 6234 --> <!-- /react-text --><li class="variant"><span>Plaintext</span></li></ul></div><div><li class="subCategory">Non-Sensitive Application Data Stored Unencrypted</li><ul><!-- react-text: 6240 --> <!-- /react-text --></ul></div><div><li class="subCategory">Screen Caching Enabled</li><ul><!-- react-text: 6244 --> <!-- /react-text --></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Lack of Binary Hardening
<div class="subcategories-list active"><div><li class="subCategory">Lack of Exploit Mitigations</li><ul><!-- react-text: 6248 --> <!-- /react-text --></ul></div><div><li class="subCategory">Lack of Jailbreak Detection</li><ul><!-- react-text: 6252 --> <!-- /react-text --></ul></div><div><li class="subCategory">Lack of Obfuscation</li><ul><!-- react-text: 6256 --> <!-- /react-text --></ul></div><div><li class="subCategory">Runtime Instrumentation-Based</li><ul><!-- react-text: 6260 --> <!-- /react-text --></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Insecure Data Transport
<div class="subcategories-list active"><div><li class="subCategory active">Cleartext Transmission of Sensitive Data</li><ul><!-- react-text: 6264 --> <!-- /react-text --></ul></div><div><li class="subCategory">Executable Download</li><ul><!-- react-text: 6268 --> <!-- /react-text --><li class="variant"><span>No Secure Integrity Check</span></li><li class="variant"><span>Secure Integrity Check</span></li></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Insecure OS/Firmware
<div class="subcategories-list active"><div><li class="subCategory active">Command Injection</li><ul><!-- react-text: 6300 --> <!-- /react-text --></ul></div><div><li class="subCategory">Hardcoded Password</li><ul><!-- react-text: 6304 --> <!-- /react-text --><li class="variant"><span>Privileged User</span></li><li class="variant"><span>Non-Privileged User</span></li></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Broken Cryptography
<div class="subcategories-list active"><div><li class="subCategory">Cryptographic Flaw</li><ul><!-- react-text: 6312 --> <!-- /react-text --><li class="variant"><span>Incorrect Usage</span></li></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Privacy Concerns
<div class="subcategories-list active"><div><li class="subCategory">Unnecessary Data Collection</li><ul><!-- react-text: 6318 --> <!-- /react-text --><li class="variant"><span>WiFi SSID+Password</span></li></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Network Security Misconfiguration
<div class="subcategories-list active"><div><li class="subCategory active">Telnet Enabled</li><ul><!-- react-text: 6324 --> <!-- /react-text --><li class="variant"><span>Credentials Required</span></li></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Mobile Security Misconfiguration
<div class="subcategories-list active"><div><li class="subCategory active">SSL Certificate Pinning</li><ul><!-- react-text: 6330 --> <!-- /react-text --><li class="variant"><span>Absent</span></li><li class="variant"><span>Defeatable</span></li></ul></div><div><li class="subCategory">Tapjacking</li><ul><!-- react-text: 6338 --> <!-- /react-text --></ul></div></div>

<br><br><br>SPVREDDY<br><br><br>SPVREDDY<br><br><br>SPVREDDY
Client-Side Injection
<div class="subcategories-list active"><div><li class="subCategory">Binary Planting</li><ul><!-- react-text: 6362 --> <!-- /react-text --><li class="variant"><span>Privilege Escalation</span></li><li class="variant"><span>No Privilege Escalation</span></li></ul></div></div>