> For the complete documentation index, see [llms.txt](https://blog.syselement.com/tcm/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.syselement.com/tcm/courses/peh/6-webapp.md).

# 6. Web Application

***

## Sections

1. [Web App Lab Setup](/tcm/courses/peh/6-webapp/1-web-lab.md)
2. [Web App - SQL Injection](/tcm/courses/peh/6-webapp/2-web-sqli.md)
3. [Web App - XSS](/tcm/courses/peh/6-webapp/3-web-xss.md)
4. [Web App - Command Injection](/tcm/courses/peh/6-webapp/4-web-cmd-injection.md)
5. [Web App - Insecure File Upload](/tcm/courses/peh/6-webapp/5-web-file-upload.md)
6. [Web App - Authentication Attacks](/tcm/courses/peh/6-webapp/6-web-auth-attacks.md)
7. [Web App - XXE](/tcm/courses/peh/6-webapp/7-web-xxe.md)
8. [Web App - IDOR](/tcm/courses/peh/6-webapp/8-web-idor.md)
9. [Web App - Capstone Practical Lab](/tcm/courses/peh/6-webapp/9-web-capstone-lab.md)

***