> For the complete documentation index, see [llms.txt](https://heinosass.gitbook.io/leet-sheet/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks.md).

# Server Attacks

- [Collisions](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/collisions.md)
- [Server Side Request Forgery](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/server-side-request-forgery.md): SSRF / Server Side Request Forgery
- [Redis SSRF](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/server-side-request-forgery/redis-ssrf.md)
- [Insecure Direct Object Reference](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/insecure-direct-object-reference.md)
- [Timing-Based Side-Channel Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/timing-based-side-channel-attacks.md)
- [Attacking Authentication Methods](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/attacking-authentication-methods.md)
- [JWT Attacks](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/attacking-authentication-methods/jwt-attacks.md)
- [Brute Forcing Web Forms](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/attacking-authentication-methods/brute-forcing-web-forms.md): Usually used to attack a login form
- [Loose Comparisons](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/loose-comparisons.md)
- [Unrestricted File Upload](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/page-3.md)
- [Insecure Deserialization](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/page-2.md)
- [Command Injection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/page-1.md)
- [Path Traversal](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/path-traversal.md)
- [File Inclusion](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/file-inclusion.md)
- [Server-Side Template Injection](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/server-side-template-injection.md)
- [XML External Entities Injection (XXE)](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/xml-external-entities-injection-xxe.md)
- [Server Misconfigurations](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/server-misconfigurations.md)
- [Parser Inconsistencies](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/parser-inconsistencies.md)
- [Bypassing WAFs](https://heinosass.gitbook.io/leet-sheet/web-app-hacking/server-attacks/bypassing-wafs.md): Bypass web application firewalls