CTFCapture The Flag - security competition format
FlagSecret string that proves challenge completion
SQLiSQL Injection - database attack
XSSCross-Site Scripting - JavaScript injection
CSRFCross-Site Request Forgery - trick users into actions
IDORInsecure Direct Object Reference - access other users' data
RCERemote Code Execution - run arbitrary code on server
LFILocal File Inclusion - read server files
RFIRemote File Inclusion - include external malicious files
PayloadAttack code or data
WriteupDetailed solution explanation for a challenge