passive discovery passive html secrets comments files directory listing receipt card query checkout query secrets callback token config config backup tilde backup old backup bucket robots java deserialization python deserialization permissions cors null jwt none weak csp cache test oauth demo csrf weak ws demo
active discovery