The OWASP Collection — Injection

Injection — use of a web application to send malicious commands.

image by author

To kick off our OWASP collection of articles, we’re starting with the number one web application vulnerability: injection.

As we covered in the Introduction, injection attacks occur when an attacker is able to inject commands into a website and trick the application into…