CATEGORY 9 / 59

Injections

15 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.

C09-T001
source 4

SQL injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T002
source 4

Blind SQL injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T003
source 4

Time-based SQL injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T004
source 4

NoSQL injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T005
source 4

LDAP injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T006
source 4

XPath injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T007
source 4

XML injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T008
source 4

Command injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T009
source 5

OS command injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T010
source 5

Template injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T011
source 5

Server-Side Template Injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T012
source 5

CRLF injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T013
source 5

Header injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T014
source 5

Host Header injection

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope

C09-T015
source 5

SMTP header injection lorsque pertinent

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Controlled automatic

Engine, evidence or review depending on scope