Security
Tools:
- sqlmap - Automatic SQL injection and database takeover tool
- PHPGGC - PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Laravel Secutiry Checklist
- Cross-Site Scripting (XSS)
- SQL Injection (SQLi)
- Cross-Site Request Forgery (CSRF)
- Insecure Direct Object References (IDOR)
- Type Juggling
- Credential Stuffing
- PHP Object Injection
- Remote Code Execution (RCE)
- Server-Side Request Forgery (SSRF)
- Privilege Escalation