OWASP Top 10 (2021) - TryHackMe Notes

In-depth notes on OWASP Top 10 categories, covering SQLi, XSS, SSRF, SSTI, and access control bypasses.

🖥️ Challenge / Machine Info

  • Platform: tryhackme
  • Name / Title: owasp-top-10
  • Difficulty: Easy
  • Target OS / Environment: Web
  • Key Vulnerability Focus: Web application vulnerabilities

OWASP Top 10 Reference

  • A01:2021-Broken Access Control: Bypassing authorization checks (IDOR, Path Traversal).
  • A03:2021-Injection: SQL injection, Command Injection, and XML External Entity (XXE).
  • A10:2021-Server-Side Request Forgery: Forcing the server to request internal APIs.