Back to Dashboard

Attack Flow Visual Diagrams

Interactive visual representations of common attack vectors and exploitation techniques.

OWASP 2021

Web Application Attacks

SQL Injection

Visual flow of SQL injection attack from initial probe to data exfiltration.

View Diagram

Broken Access Control

OWASP #1 - Unauthorized access to resources and privilege escalation.

View Diagram

Cross-Site Scripting (XSS)

Injecting malicious scripts, session hijacking, and credential theft.

View Diagram

SSRF Attack

Server-Side Request Forgery to access internal services and cloud metadata.

View Diagram

Insecure Deserialization

Remote code execution via object injection and gadget chains.

View Diagram

CSRF Attack

Cross-Site Request Forgery forcing authenticated users to perform actions.

View Diagram

XXE Attack

XML External Entity exploitation for file disclosure and SSRF.

View Diagram

Path Traversal

Directory traversal to access sensitive files and system resources.

View Diagram

Command Injection

OS command injection leading to remote code execution and system control.

View Diagram

Authentication Bypass

Techniques to bypass login mechanisms and gain unauthorized access.

View Diagram

Session Hijacking

Session token theft and account takeover through various attack vectors.

View Diagram

API Security Attacks

BOLA/IDOR

Broken Object Level Authorization - accessing other users' resources.

View Diagram

Mass Assignment

Injecting unauthorized parameters to modify restricted object properties.

View Diagram

Rate Limiting Bypass

Circumventing API rate controls through various bypass techniques.

View Diagram

Mobile Security Attacks

Insecure Data Storage

Extracting sensitive data from mobile device storage and databases.

View Diagram

Man-in-the-Middle

Intercepting mobile communications and bypassing SSL/TLS protection.

View Diagram

LLM Security Attacks

Prompt Injection

Manipulating AI model behavior through crafted prompts and jailbreaking.

View Diagram

Training Data Poisoning

Corrupting model training data to inject backdoors and biases.

View Diagram

How to Use Diagrams

These interactive diagrams help visualize the complete attack chain from initial reconnaissance to successful exploitation. Use them to understand the attacker's perspective and identify defense opportunities at each stage.