See also: server-side-advanced.md for Part 1 (ExifTool, Go rune/byte mismatch, zip symlink traversal, path traversal bypasses, Flask/Werkzeug debug, XXE external DTD, WeasyPrint SSRF, MongoDB regex ...
New to programming? Skim this article for the big picture, then start the beginner tutorials to write code hands-on. Coming from Java, JavaScript, or Python? Read the tips for Java, JavaScript, or ...