secu

https://cheatsheet.haax.fr/web-pentest/misc_tricks/

https://www.offensive-security.com/metasploit-unleashed/metasploit-fundamentals/

https://www.cobalt.io/blog/a-pentesters-guide-to-file-inclusion

https://portswigger.net/web-security/cross-site-scripting/cheat-sheet

https://pentest-tools.com/blog/xss-attacks-practical-scenarios

https://csp-evaluator.withgoogle.com/

https://github.com/carlospolop/hacktricks/blob/master/pentesting-web/dangling-markup-html-scriptless-injection.md

requestbin.net