Method

Bypass Client/Server Side Filter

HTTP Rate Limit Bypass

Virtual Hosts (VHOSTS) Enumeration

WAF (Web Application Firewall) Detection

Web Basic Pentesting

Web Content Discovery

Web Login Bypass

Web Registration (Signup) Attack

Web Server Security Misconfiguration

Security Risk

Blind XXE

Broken Access Control

Business Logic Attack

CORS (Cross-Origin Resource Sharing) Attack

CRLF (Carriage Return Line Feed) Injection

CSRF (Cross-Site Request Forgery)

Client-Side JavaScript Validation Bypass

DOM Cloberring

Directory (Path) Traversal

ERB SSTI

File Inclusion (LFI/RFI)

File Upload Attack

File Upload Attack on Exiftool

File Upload Attack on ImageMagick

HTTP Header Injection

HTTP Request Smuggling

Host Header Attack

IDOR (Insecure Direct Object References) Attack

Insecure Deserialization

JSON.NET Deserialization

LaTeX Injection

NoSQL Injection

Node.js Deserialization Attack

OAuth Attack

OS Command Injection

Open Redirect

PHP Filters Chain

PHP Object Injection

Prototype Pollution in Client-Side

Prototype Pollution in Server-Side

Redis SSRF

SQL Injection

SQL Injection Cheat Sheet

SQL Injection with Sqlmap

SSRF (Server-Side Request Forgery)

SSTI (Server-Side Template Injection)

Web Cache Deception

Web Cache Poisoning

Web Race Condition Attack

XSS (Cross-Site Scripting)

XSS with Dynamic PDF

XST (Cross-Site Tracing)

XXE (XML External Entity)

wkhtmltopdf SSRF

XST (Cross-Site Tracing)

Last modified: 2022-12-22

XST is a network security vulnerability exploiting the HTTP TRACE method.

TRACE / HTTP/1.1
...
Cookie: name=value
...

Method

Security Risk

Cookie

CMS

Framework

Template Engine

API

Microsoft

Tool

Others

XST (Cross-Site Tracing)

Add Cookie Header

ON THIS PAGE