> For the complete documentation index, see [llms.txt](https://notes.qazeer.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.qazeer.io/web-applications.md).

# Web applications

- [Recon - Server exposure](https://notes.qazeer.io/web-applications/recon-server_exposure.md)
- [Recon - Hostnames discovery](https://notes.qazeer.io/web-applications/recon-hostnames_discovery.md)
- [Recon - Application mapping](https://notes.qazeer.io/web-applications/recon-application_mapping.md)
- [Recon - Attack surface overview](https://notes.qazeer.io/web-applications/recon-attack_surface.md)
- [CMS & softwares](https://notes.qazeer.io/web-applications/cms_and_softwares.md)
- [ColdFusion](https://notes.qazeer.io/web-applications/cms_and_softwares/coldfusion.md)
- [DotNetNuke](https://notes.qazeer.io/web-applications/cms_and_softwares/dotnetnuke.md)
- [Jenkins](https://notes.qazeer.io/web-applications/cms_and_softwares/jenkins.md)
- [Jira](https://notes.qazeer.io/web-applications/cms_and_softwares/jira.md)
- [Ovidentia](https://notes.qazeer.io/web-applications/cms_and_softwares/ovidentia.md)
- [WordPress](https://notes.qazeer.io/web-applications/cms_and_softwares/wordpress.md)
- [WebDAV](https://notes.qazeer.io/web-applications/cms_and_softwares/webdav.md)
- [Exploitation - Overview](https://notes.qazeer.io/web-applications/exploitation-overview.md)
- [Exploitation - Authentication](https://notes.qazeer.io/web-applications/exploitation-authentication.md)
- [Exploitation - LDAP injections](https://notes.qazeer.io/web-applications/exploitation-ldap_injections.md)
- [Exploitation - Local and remote file inclusions](https://notes.qazeer.io/web-applications/exploitation-local_and_remote_file_inclusions.md)
- [Exploitation - File upload](https://notes.qazeer.io/web-applications/exploitation-file_upload.md)
- [Exploitation - SQL injections](https://notes.qazeer.io/web-applications/exploitation-sql_injections.md)
- [SQLMAP.md](https://notes.qazeer.io/web-applications/exploitation-sql_injections/sqlmap.md)
- [MSSQL.md](https://notes.qazeer.io/web-applications/exploitation-sql_injections/mssql.md)
- [MySQL.md](https://notes.qazeer.io/web-applications/exploitation-sql_injections/mysql.md)
- [SQLite.md](https://notes.qazeer.io/web-applications/exploitation-sql_injections/sqlite.md)
- [Exploitation - NoSQL injections](https://notes.qazeer.io/web-applications/exploitation-nosql_injections.md)
- [NoSQLMap.md](https://notes.qazeer.io/web-applications/exploitation-nosql_injections/nosqlmap.md)
- [mongoDB.md](https://notes.qazeer.io/web-applications/exploitation-nosql_injections/mongodb.md)
- [Exploitation - GraphQL](https://notes.qazeer.io/web-applications/exploitation-graphql.md)