> For the complete documentation index, see [llms.txt](https://wiki.pentestlist.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.pentestlist.com/offensive-security/web-application/exploitation/injection-attacks.md).

# Injection Attacks

- [SQL Injection](https://wiki.pentestlist.com/offensive-security/web-application/exploitation/injection-attacks/sql-injection.md): How to exploit SQL and noSQL Injection.
- [Cross-Site Scripting](https://wiki.pentestlist.com/offensive-security/web-application/exploitation/injection-attacks/cross-site-scripting.md): How to exploit cross-site scripting (XSS).
- [HTTP Headers](https://wiki.pentestlist.com/offensive-security/web-application/exploitation/injection-attacks/http-headers.md): How to exploit HTTP Headers.