Frameworks
Part of 01 Web in the Web Application Testing Cheatsheet.
Server-side and full-stack web frameworks. Each file covers the framework's detection, enumeration, known CVEs, exploitation patterns, misconfigurations, and post-exploitation. The list is grouped by language so you can jump to the stack you identified during recon.
Files
| File | Language | Description |
|---|---|---|
| ASP.NET.md | C# / .NET | ASP.NET Core, MVC, and legacy WebForms - IIS-hosted stacks. |
| Django.md | Python | Django full-stack framework - ORM, admin panel, template engine. |
| Express.md | Node.js | Express.js minimal framework - middleware chain, routing. |
| Flask.md | Python | Flask micro-framework - Jinja2 templates, blueprints. |
| Laravel.md | PHP | Laravel - Eloquent ORM, Blade templates, Artisan. |
| Next.js.md | JavaScript / React | Next.js React meta-framework - SSR, API routes, server actions. |
| Rails.md | Ruby | Ruby on Rails - convention over configuration, ActiveRecord. |
| Spring-Boot.md | Java | Spring Boot - embedded Tomcat, Actuator endpoints, Spring Security. |
See 01 Web README for the full subcategory map.