{ "sql-injection": "sql-injection", "cross-site-scripting": "cross-site-scripting", "cross-site-request-forgery-csrf": "csrf", "clickjacking": "clickjacking", "dom-based-vulnerabilities": "dom-based", "cross-origin-resource-sharing-cors": "cors", "xml-external-entity-xxe-injection": "xxe", "server-side-request-forgery-ssrf": "ssrf", "http-request-smuggling": "request-smuggling", "os-command-injection": "os-command-injection", "server-side-template-injection": "server-side-template-injection", "path-traversal": "file-path-traversal", "access-control-vulnerabilities": "access-control", "authentication": "authentication", "websockets": "websockets", "web-cache-poisoning": "web-cache-poisoning", "insecure-deserialization": "deserialization", "information-disclosure": "information-disclosure", "business-logic-vulnerabilities": "logic-flaws", "http-host-header-attacks": "host-header", "oauth-authentication": "oauth", "file-upload-vulnerabilities": "file-upload", "jwt": "jwt", "essential-skills": "essential-skills", "prototype-pollution": "prototype-pollution", "graphql-api-vulnerabilities": "graphql", "race-conditions": "race-conditions", "nosql-injection": "nosql-injection", "api-testing": "api-testing", "web-llm-attacks": "llm-attacks", "web-cache-deception": "web-cache-deception" }