Skip to main content

Languages

Part of 01 Web in the Web Application Testing Cheatsheet.

Server-side programming languages you will encounter on a web engagement. Each file covers detection (how to tell the language from the outside), enumeration (paths, endpoints, debug pages), and language-specific exploitation patterns.


Files​

FileLanguageDescription
DotNet.mdC# / .NET.NET, ASP.NET, and ASP.NET Core - IIS-hosted or Kestrel-hosted stacks.
Go.mdGoGo web services - net/http, Gin, Echo, and common deployment patterns.
Java.mdJavaJava web stacks - servlet containers, Spring, and deserialization surface.
NodeJS.mdJavaScriptNode.js runtimes - Express, Fastify, and the npm dependency surface.
PHP.mdPHPPHP runtimes - LAMP/LEMP stacks, phpinfo, wrappers, and known CVEs.
Python.mdPythonPython web stacks - WSGI/ASGI servers, Django, Flask, and FastAPI.
Ruby.mdRubyRuby web stacks - Rails, Sinatra, and Rack middleware.

See 01 Web README for the full subcategory map.