Top-25 Parameters

on YouTube ↗11m

" summary

A publicly curated dataset of the “top‑25 parameters” for web vulns claims ranked likelihoods for XSS SQLi LFI SSRF and RCE with concrete examples (id highest for XSS, email name date markers, file/cat/action for LFI, callback/openredir for SSRF). Project starts in 2021 gains ~1,500 GitHub stars and OWASP project status and combines manual parameter lists with a planned automation pipeline producing confirmed vs unconfirmed data used for fuzzing SAST/DAST and already seeding ecosystem tooling adaptations.

AI-written summary · about

" chapters (7)

1. 0:00Intro
2. 0:35Who am I
3. 2:00Source of Patterns
4. 4:18Project Timeline
5. 5:33Top25 Parameters
6. 8:10Methodology
7. 9:53Feedbacks

" related talks

• 47mOWASP Top 10Andrew van der Stock · OWASP AppSec California 2018
• 26mFlagship Projects: Top 10 "The making of the OWASP Top 10 and beyond"Brian Glas · OWASP 20th Anniversary 2021
• 52mDemystifying Front-End SecurityIlya Verbitskiy · NDC Sydney 2020
• 58mModern web application bugsErlend Oftedal · NDC Minnesota 2019
• 50mWorrisome Web Vulnerability Trends in the Race to InnovationNicholas Sciberras · OWASP 2022 Global AppSec Europe Virtual Event
• 53mVulnerabilities Are Ingredients And OWASP Top 10 The Seasoning- Meghan JacquotMeghan Jacquot · Global AppSec Dublin 2023
• 01h 00mWeb Application Security Risks: A Look at OWASP Top Ten 2017Christian Wenz · NDC Oslo 2017
• 40mXXSS: Exotic Cross-Site Scripting vectorsBenedek Gagyi · Øredev 2019