# Web Pentesting

- [SQL Injection](/home/notes/web-pentesting/sql-injection.md): https://tryhackme.com/room/advancedsqlinjection
- [Stored SQLi](/home/notes/web-pentesting/sql-injection/stored-sqli.md)
- [Filter Evasion](/home/notes/web-pentesting/sql-injection/filter-evasion.md): My notes from the Filter Evasion section in the Advanced SQLi room on TryHackme.
- [HTTP Header Injection](/home/notes/web-pentesting/sql-injection/http-header-injection.md)
- [Other Endpoints](/home/notes/web-pentesting/sql-injection/other-endpoints.md)
- [Tools for Automation](/home/notes/web-pentesting/sql-injection/tools-for-automation.md)
- [Tips for Pentesters](/home/notes/web-pentesting/sql-injection/tips-for-pentesters.md): Taken from the Advanced SQLi room in TryHackMe.
- [NoSQL Injection](/home/notes/web-pentesting/nosql-injection.md): The notes I took while doing the NoSQLi Walkthrough on TryHackMe.
- [Types of Injection](/home/notes/web-pentesting/nosql-injection/types-of-injection.md)
- [Example 1](/home/notes/web-pentesting/nosql-injection/example-1.md)
- [Example 2](/home/notes/web-pentesting/nosql-injection/example-2.md)
- [Regex Operator](/home/notes/web-pentesting/nosql-injection/regex-operator.md)
- [XXE Injection](/home/notes/web-pentesting/xxe-injection.md)
- [XML Entities](/home/notes/web-pentesting/xxe-injection/xml-entities.md)
- [XML Parser](/home/notes/web-pentesting/xxe-injection/xml-parser.md)
- [Exploitation](/home/notes/web-pentesting/xxe-injection/exploitation.md)
- [SSTI](/home/notes/web-pentesting/ssti.md): My notes on Server Side Template Injection taken while solving the SSTI walkthroughs on TryHackMe.
- [Example 1](/home/notes/web-pentesting/ssti/example-1.md)
