Server-side Attacks

• Server-Side Request Forgery (SSRF)

• Server-Side Template Injection (SSTI)

• https://owasp.org/www-project-web-security-testing-guide/stable/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server-side_Template_Injection

• Server-Side Includes (SSI) Injection

• https://owasp.org/www-community/attacks/Server-Side_Includes_(SSI)_Injection

• XSLT Server-Side Injection