# Web Security Category Index

- 点击劫持 (2): web-playbook-01-clickjacking.md
- 供应链攻击 (3): web-playbook-02-supply-chain-attacks.md
- 缓存与CDN安全 (3): web-playbook-03-cache-and-cdn-security.md
- 开放重定向 (3): web-playbook-04-open-redirect.md
- 框架漏洞 (18): web-playbook-05-framework-vulnerabilities.md
- 请求走私 (4): web-playbook-06-request-smuggling.md
- 认证漏洞 (10): web-playbook-07-authentication-vulnerabilities.md
- 文件漏洞 (7): web-playbook-08-file-vulnerabilities.md
- 业务逻辑漏洞 (5): web-playbook-09-business-logic-vulnerabilities.md
- 原型链污染 (3): web-playbook-10-prototype-pollution.md
- 云安全漏洞 (4): web-playbook-11-cloud-security-vulnerabilities.md
- AI安全 (4): web-playbook-12-ai-security.md
- API安全 (12): web-playbook-13-api-security.md
- CSRF跨站请求伪造 (8): web-playbook-14-csrf-cross-site-request-forgery.md
- JWT安全 (4): web-playbook-15-jwt-security.md
- LFI/RFI文件包含 (12): web-playbook-16-lfi-rfi-file-inclusion.md
- RCE远程代码执行 (12): web-playbook-17-rce-remote-code-execution.md
- SQL/NoSQL注入 (17): web-playbook-18-sql-nosql-injection.md
- SSRF服务端请求伪造 (12): web-playbook-19-ssrf-server-side-request-forgery.md
- SSTI模板注入 (10): web-playbook-20-ssti-template-injection.md
- WebSocket安全 (3): web-playbook-21-websocket-security.md
- XSS跨站脚本 (12): web-playbook-22-xss-cross-site-scripting.md
- XXE实体注入 (9): web-playbook-23-xxe-entity-injection.md

