| Endpoint |
Method |
Description |
Example |
| /search | GET | Search documents (XSS / SSTI) | /search?q=hello |
| /ping | GET | Ping a host (Command Injection) | /ping?host=localhost |
| /file | GET | Read a file (Path Traversal) | /file?name=test.txt |
| /fetch | GET | Fetch a URL (SSRF) | /fetch?url=http://example.com |
| /login | POST | User login (SQL Injection) | POST username + password |
| /user/<id> | GET | Get user profile (IDOR) | /user/1 |
| /upload | POST | Upload a file (Unrestricted Upload) | POST multipart/form-data |
| /download | GET | Download from S3 (IDOR) | /download?key=test |
| /deserialize | POST | Deserialize object (RCE via pickle) | POST JSON {data: base64} |