reflected xss (1)
stored xss (1)
BLIND XSS (1)
dom xss
html injection
SQL INJECTION
LFI
subdomain takeover
Windows IIS server
IDOR
XXE
Directory listing