Web Application Vulnerability Reference

★ 8.2 · security

web2-vuln-classes gives Claude Code a complete reference for 26 web application vulnerability classes, covering root causes, detection patterns, bypass tables, exploit techniques, and real paid bug bounty examples. It includes IDOR, auth bypass, XSS, SSRF (11 IP bypass techniques), SQLi, business logic flaws, race conditions, OAuth/OIDC, file upload (10 bypass techniques), GraphQL, LLM/AI (ASI01–ASI10 agentic framework), API misconfig (mass assignment, JWT attacks, prototype pollution, CORS), ATO taxonomy (9 paths), SSTI across Jinja2/Twig/Freemarker/ERB/Spring, HTTP smuggling (CL.TE/TE.CL/H2.CL), cache poisoning, MFA bypass (7 patterns), SAML attacks, LFI-to-RCE chains, insecure deserialization for PHP/Java/Python/Node, dependency confusion, and CSS injection. Built for bug bounty hunters and penetration testers who need a structured reference when hunting a specific vulnerability class or studying what makes findings pay.