Your Ultimate Pentesting Arsenal
Using old versions of jQuery with known XSS
Dependencies with remote execution vulnerabilities
Outdated frameworks with security flaws