<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://appsecpath.com/</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://appsecpath.com/courses</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://appsecpath.com/labs</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.95</priority>
</url>
<url>
<loc>https://appsecpath.com/interview</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.95</priority>
</url>
<url>
<loc>https://appsecpath.com/resume-scanner</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.85</priority>
</url>
<url>
<loc>https://appsecpath.com/research</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/blog</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/about</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.85</priority>
</url>
<url>
<loc>https://appsecpath.com/about/tushar-gurav</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.85</priority>
</url>
<url>
<loc>https://appsecpath.com/bug-bounty</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.75</priority>
</url>
<url>
<loc>https://appsecpath.com/tools</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://appsecpath.com/pricing</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://appsecpath.com/leaderboard</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>hourly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://appsecpath.com/auth/login</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://appsecpath.com/auth/register</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://appsecpath.com/blog/cve-2026-0257-globalprotect-auth-bypass</loc>
<lastmod>2026-06-03T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://appsecpath.com/blog/cve-2026-39808-fortisandbox-command-injection</loc>
<lastmod>2026-04-20T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://appsecpath.com/blog/cve-2026-39813-fortisandbox-jrpc-path-traversal</loc>
<lastmod>2026-04-21T00:00:00.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/base64-chain-decode</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/jwt-algorithm-none</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/rot13-hex-pipeline</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/http-header-exfiltration</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/caesar-cipher-frequency</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/ecb-block-repeats</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/weak-rsa-factoring</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/padding-oracle-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/steganography-lsb-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/osint-email-header-analysis</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/binary-overflow-identification</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/hash-collision-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/double-url-encoding-bypass</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/multi-layer-encoding-chain</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/xor-key-recovery</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/vigenere-cipher-break</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/aes-key-reuse-nonce</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/rsa-small-exponent</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/jwt-kid-sqli</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/time-based-otp-bypass</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/heap-use-after-free</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/blind-xxe-oob</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/elliptic-curve-invalid-point</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/ctf/rop-chain-stack-pivot</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/trace-ssrf-attack-chain</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/incident-response-log-analysis</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/api-key-leakage-investigation</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/phishing-email-investigation</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/ransomware-incident-triage</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/linux-privesc-timeline</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/supply-chain-npm-attack</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/aws-cross-account-iam-breach</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/insider-data-theft-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/apt-lateral-movement-chain</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/golden-ticket-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/oauth-token-theft</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/kubernetes-rbac-escape</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/memory-forensics-process-injection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/waf-bypass-exfiltration</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/azure-managed-identity-abuse</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/scenarios/apt-c2-infrastructure-mapping</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/email-validation-regex</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/ipv4-address-extractor</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/xss-filter-bypass</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/sql-comment-bypass</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/ssrf-url-bypass</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/log4shell-jndi-pattern</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/path-traversal-filter-bypass</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/jwt-claim-tampering</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/command-injection-semicolon-bypass</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/ssti-jinja2-sandbox-escape</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/graphql-introspection-bypass</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/csp-bypass-jsonp-callback</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/deserialization-gadget-chain</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/prototype-pollution-rce</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/crafting/oauth-pkce-downgrade-attack</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/dns-tunneling-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/c2-beacon-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/data-exfil-icmp</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/arp-spoofing-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/nmap-syn-scan-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/tls-downgrade-sslv3</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/covert-http-header-channel</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/kerberoasting-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/smb-relay-attack</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/http-smuggling-desync</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/dns-rebinding-detection</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/packet-analysis/covert-timing-channel</loc>
<lastmod>2026-08-25T17:49:18.391Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/stock-order-queue</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/asset-storage-traversal</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cookie-deserialization</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/medicare-connect</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/payment-gateway-api</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/user-auth-service</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/file-storage-service</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ecommerce-inventory-api</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/customer-data-api</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/nginx-tls-misconfiguration</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/dockerfile-root-user</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/k8s-pod-security-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/aws-iam-overpermissive</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ssh-server-hardening</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/apache-directory-listing</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/missing-csp-header</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/dangerous-cors-wildcard</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/hsts-zero-max-age</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/deprecated-xfo-allow-from</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/insecure-session-cookie</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/open-redirect-url-param</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/mixed-content-loading</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/predictable-session-token</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-origin-reflection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-search-reflection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-comment-stored</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-error-page-reflection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-dom-hash-greeting</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-profile-username</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-markdown-preview</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-json-api-response</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-websocket-chat</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-svg-upload</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-postmessage-widget</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-angular-template-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-dom-clobbering-login</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-mutation-dompurify-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-csp-bypass-jsonp</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-second-order-email</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-service-worker-hijack</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-react-ssr-hydration</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-prototype-pollution-gadget</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-oauth-redirect-fragment</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/xss-trusted-types-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-ticket-invoice-download</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-social-media-avatar</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-food-delivery-menu-image</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-ecommerce-product-export</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-banking-statement-view</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-cloud-storage-api</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-hosting-template-render</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-hr-payslip-download</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-hospital-dicom-viewer</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-lms-course-material</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-crm-attachment-preview</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-travel-itinerary-pdf</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-video-stream-subtitle</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-saas-file-share-api</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-document-mgmt-version</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-erp-zip-import</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-banking-log-poisoning</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-container-symlink-escape</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-dotnet-middleware-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-spring-multipart-write</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-fintech-report-microservice</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-healthcare-dicom-gateway</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-ci-cd-artifact-pipeline</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-saas-tenant-backup-restore</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/pt-enterprise-sso-portal</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-verbose-php-error</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-express-server-header</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-python-debug-mode</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-git-directory-exposed</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-java-stack-trace-api</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-docker-env-secrets</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-csharp-user-enumeration</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-go-health-endpoint-leak</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-graphql-introspection-prod</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-spring-actuator-exposure</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-python-api-overfetch</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-php-phpinfo-exposed</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-node-source-maps-prod</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-cpp-crash-dump-leak</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-dotnet-swagger-prod</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-aws-s3-public-listing</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-laravel-debug-mode</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-node-error-database-leak</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-go-grpc-reflection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-nginx-status-page</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-k8s-configmap-secrets-leak</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-microservice-imds-ssrf-chain</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-dotnet-multi-layer-disclosure</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-python-cicd-secrets-pipeline</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-java-multi-endpoint-disclosure</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-go-distributed-trace-leak</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-php-wordpress-multi-vector</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-rust-wasm-secrets-exposure</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-fullstack-logging-exfiltration</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-terraform-state-secrets-exposure</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/id-mobile-backend-graphql-introspection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-idor-user-profile-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-idor-order-download-php</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-vertical-admin-panel-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-idor-delete-comment-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-mass-assignment-registration-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-idor-password-reset-django</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-forced-browsing-dotnet</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-idor-graphql-nested-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-jwt-role-claim-trust-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-tenant-bypass-query-param-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-horizontal-escalation-medical-csharp</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-bfla-duplicate-endpoint-fastapi</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-race-condition-coupon-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-parameter-pollution-role-php</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-websocket-channel-subscribe-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-nested-resource-django-rest</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-idor-trading-portfolio-cpp</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-mass-assignment-entity-update-dotnet</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-presigned-url-idor-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-confused-deputy-microservice-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-k8s-rbac-privilege-escalation</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-oauth-scope-escalation-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-multi-tenant-data-leak-django</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-docker-container-escape-privilege</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-grpc-interceptor-bypass-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/ac-serverless-iam-escalation-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-weak-password-hash-php</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-hardcoded-credentials-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-missing-rate-limit-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-session-fixation-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-username-enumeration-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-plaintext-password-log-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-jwt-none-algorithm-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-insecure-cookie-dotnet</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-timing-attack-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-password-reset-host-injection-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-mfa-bypass-step-skip-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-predictable-reset-token-php</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-jwt-weak-secret-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-remember-me-weak-token-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-oauth-missing-state-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-password-reset-no-invalidation-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-race-condition-registration-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-insecure-password-change-dotnet</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-insecure-token-storage-docker</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-logout-incomplete-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-jwt-alg-confusion-microservice</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-oauth-account-takeover-fullstack</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-saml-xsw-attack-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-refresh-token-race-condition-ts</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-k8s-service-account-escalation</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-multi-tenant-token-confusion-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/auth-session-race-cpp-redis</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-client-side-price-php</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-negative-quantity-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-coupon-reuse-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-checkout-skip-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-mass-assignment-ruby</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-refund-exceed-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-expired-coupon-csharp</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-direct-status-update-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-race-condition-wallet-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-inventory-oversell-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-subscription-trial-abuse-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-webhook-forgery-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-integer-overflow-cpp</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-floating-point-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-referral-self-refer-php</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-approval-self-approve-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-tenant-isolation-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-idempotency-missing-go</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-coupon-stacking-csharp</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-booking-overlap-python</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-api-version-bypass-node</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-graphql-alias-brute-ruby</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-state-machine-violation-java</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-microservice-checkout-chain</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-gift-card-money-creation</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-distributed-race-saga</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-event-driven-ordering-exploit</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-multi-tenant-privilege-escalation</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-payment-amount-mismatch-fullstack</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/bl-currency-arbitrage-microservices</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-python-ping-utility</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-php-dns-lookup</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-nodejs-whois</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-java-traceroute</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-go-certificate-check</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-ruby-git-log</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-csharp-pdf-export</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-python-image-resize</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-node-ffmpeg-video</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-python-celery-worker</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-java-zip-extraction</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-php-email-sender</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-go-healthcheck-curl</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-python-git-webhook</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-dotnet-backup-scheduler</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-node-latex-compile</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-python-ansible-playbook</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-cpp-log-viewer</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-node-docker-build</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-php-wkhtmltopdf-header</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-cicd-pipeline-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-k8s-operator-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-multiservice-ssrf-to-rce</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-serverless-layer-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-django-celery-second-order</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-graphql-mutation-to-shell</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-terraform-provider-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-spring-boot-actuator-rce</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-rust-unsafe-ffi</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cmdi-hard-dotnet-middleware-chain</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-express-origin-reflection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-flask-wildcard-credentials</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-php-null-origin-trust</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-django-regex-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-go-http-origin-trust</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-spring-boot-annotation-wildcard</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-nginx-reflect-all</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-aspnet-substring-check</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-node-endswith-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-fastapi-dynamic-tenant</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-java-servlet-missing-vary</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-ruby-rails-subdomain-trust</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-dotnet-preflight-auth-block</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-python-websocket-no-origin-check</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-symfony-env-leak</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-go-grpc-gateway-https-only-check</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-cpp-iot-mongoose-reflect</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-apache-htaccess-env-reflect</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-nextjs-api-route-reflect</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-docker-compose-cors-proxy</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-microservice-gateway-chain</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-spring-security-entrypoint</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-k8s-istio-canary-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-oauth-token-endpoint-theft</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-aws-lambda-apigw-conflict</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-graphql-introspection-exfil</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-nginx-header-duplication</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-dotnet-signalr-hub-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-terraform-cloudfront-s3-miscfg</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/cors-php-laravel-sanctum-spa-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-php-password-change-no-token</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-flask-get-state-change</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-express-token-not-validated</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-spring-csrf-disabled</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-django-csrf-exempt-critical</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-rails-skip-forgery-protection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-go-admin-no-protection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-django-token-not-session-bound</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-express-double-submit-unsigned</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-laravel-referer-regex-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-spring-method-override-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-aspnet-token-only-when-present</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-go-json-textplain-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-fastapi-samesite-none-no-csrf</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-express-origin-substring-match</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-symfony-token-in-url</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-drf-cookie-auth-no-csrf</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-sinatra-login-csrf</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-java-servlet-predictable-token</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-microservice-gateway-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-multitenant-subdomain-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-oauth-state-missing-callback</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-spa-cors-token-theft-chain</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-graphql-mutation-via-get</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-websocket-hijacking-origin</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/csrf-cpp-iot-cookie-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-php-no-validation</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-python-flask-original-name</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-node-extension-only-check</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-java-no-size-limit</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-dotnet-mime-only</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-go-web-root-upload</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-ruby-header-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-php-magic-bytes-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-python-zip-slip</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-node-multer-dest-traversal</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-java-imageio-xxe</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-dotnet-antivirus-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-go-s3-presigned-upload-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-python-pil-decompression-bomb</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-node-ffmpeg-command-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-java-servlet-stored-xss-filename</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-ruby-carrierwave-content-type-spoof</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-dotnet-open-redirect-after-upload</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-python-werkzeug-secure-filename-bypass</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-go-multipart-boundary-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-java-ssrf-via-url-upload</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-php-htaccess-override-upload</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-python-imagemagick-ghostscript-rce</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-java-spring-multipart-dos</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-node-tar-slip</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-dotnet-azure-blob-sas-misconfiguration</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-python-xml-upload-xxe</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-go-gcs-bucket-acl-public</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-java-pdf-js-injection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://appsecpath.com/labs/secure-code-review/fu-node-graphql-file-upload-introspection</loc>
<lastmod>2026-08-25T17:49:18.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
</urlset>
