What types of vulnerabilities can DAST tools typically detect?

DAST tools can detect various runtime vulnerabilities including:

• Injection Attacks: SQL injection, XSS, LDAP injection, command injection
• Authentication Issues: Weak authentication mechanisms, session management flaws
• Authorization Problems: Privilege escalation, access control bypasses
• Configuration Vulnerabilities: Insecure server configurations, exposed sensitive files
• Input Validation Flaws: Parameter tampering, malformed input handling
• Business Logic Vulnerabilities: Workflow bypasses, race conditions
• Transport Security Issues: Unencrypted communications, weak SSL/TLS configurations
• Information Disclosure: Sensitive data exposure, error message leakage
  Example: A DAST tool might detect SQL injection by sending payloads like ' OR 1=1-- to input fields and analyzing responses for database errors or unexpected behavior.