Knowledge Base

The user guide describes the platform: where a control sits, what happens when you press it, and what state it leaves behind. This section describes web security itself: what a class of vulnerability is, what evidence points at it, and how to read what a server sends back.

If you want to know where a button is, go to the user guide. If you want to know what a vulnerability looks like, stay here.

Pages

Page	What it answers
HTTP status codes	What each response class says about how the server handled the request, and which individual codes carry more information than their name suggests.
SQL injection	What causes this class of vulnerability, which payload shapes probe for it, and what in a response separates an injectable parameter from one that is not.

Scope

These pages state general judgement criteria. They are tied to no challenge on this site, they name no challenge, and they give away no challenge's answer.