Example Usage
01 Accounting Desync → most common Critical (37% of all payouts) 02 Access Control → most common High 03 Incomplete Path → missing modifier on a sibling function 04 Off-by-One → boundary operators, index errors 05 Oracle Price → TWAP manipulation, stale prices 06 ERC4626 Vaults → share inflation, rounding attacks 07 Reentrancy → cross-function, cross-contract, read-only 08 Flash Loan → price manipulation, economic attacks 09 Signature Replay → cross-chain replay, missing nonce/chainId 10 Proxy/Upgrade → uninitialized implementation, storage collision
See also
graphql-cop
Open Source
Security Auditor Utility for GraphQL APIs…
aizawa
Open Source
Aizawa is a command-line webshell designed to execute commands through HTTP header…
API-Pentesting-Tools
Open Source
API Pentesting Tools are specialized security tools used to test and analyze the security of Applica…
EyeWitness
Open Source
Kali
Takes screenshots of web pages, RDP, and VNC services. Reports on default credentials and interestin…
Burp Suite
Freemium
Kali
Leading platform for web application security testing. The Community Edition includes an interceptin…
BSCP
Free
Cheatsheet, Notes, Payloads and Mayhem for Burp Suite Practitioner Exam (BSCP)…