> For the complete documentation index, see [llms.txt](https://cel1s0.gitbook.io/offsec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics.md).

# Server-side topics

- [Authentication vulnerabilities](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/authentication-vulnerabilities.md): https://portswigger.net/web-security/authentication
- [OS Command Injection](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/os-command-injection.md): https://portswigger.net/web-security/os-command-injection
- [File Path Traversal](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/file-path-traversal.md): https://portswigger.net/web-security/file-path-traversal
- [Business logic vulnerabilities](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/business-logic-vulnerabilities.md): https://portswigger.net/web-security/logic-flaws
- [Information disclosure vulnerabilities](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/information-disclosure-vulnerabilities.md): https://portswigger.net/web-security/information-disclosure
- [Access control vulnerabilities and privilege escalation](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/access-control-vulnerabilities-and-privilege-escalation.md): https://portswigger.net/web-security/access-control
- [File upload vulnerabilities](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/file-upload-vulnerabilities.md): https://portswigger.net/web-security/file-upload
- [Server-side request forgery (SSRF)](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/server-side-request-forgery-ssrf.md): https://portswigger.net/web-security/ssrf
- [XML external entity (XXE) injection](https://cel1s0.gitbook.io/offsec-notes/portswigger-academy/server-side-topics/xml-external-entity-xxe-injection.md): https://portswigger.net/web-security/xxe