> For the complete documentation index, see [llms.txt](https://dev2ero.gitbook.io/notes-cs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security.md).

# Web

- [常见漏洞](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/lou-dong-yuan-li.md)
- [SQLi - SQL injection](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/lou-dong-yuan-li/sqli-sql-injection.md)
- [XSS - Cross Site Scripting](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/lou-dong-yuan-li/xss-cross-site-scripting.md)
- [基本原理](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/lou-dong-yuan-li/xss-cross-site-scripting/ji-ben-yuan-li.md)
- [CSRF - Cross Site Request Forgery](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/lou-dong-yuan-li/csrf-cross-site-request-forgery.md)
- [SSRF - Server-Side Request Forgery](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/lou-dong-yuan-li/ssrf-server-side-request-forgery.md)
- [XXE - XML External Entity](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/lou-dong-yuan-li/xxe-xml-external-entity.md)
- [基本原理](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/lou-dong-yuan-li/xxe-xml-external-entity/ji-ben-yuan-li.md)
- [通用工具](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/gong-ju-xiang-web-an-quan.md)
- [Burp Suite](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/gong-ju-xiang-web-an-quan/burp-suite.md)
- [Wireshark](https://dev2ero.gitbook.io/notes-cs/cyber-security/xin-xi-an-quan-yuan-li/web-security/gong-ju-xiang-web-an-quan/wireshark.md)