@@ -110,7 +110,7 @@ You can find encoding techniques and ready to use directory traversal payloads a
         - `file.txt""""`
         - `file.txt<<<>>><`
         - `./././file.txt`
-        - `nonexistant/../file.txt`
+        - `nonexistent/../file.txt`
 - Windows API: The following items are discarded when used in any shell command or API call where a string is taken as a filename:
     - periods
     - spaces
 
@@ -125,7 +125,7 @@ If Device 2 gains authenticated access without credential entry or MFA, the arti
 - Step 4 - Logout Validation Across Devices
 
 1. On Device 1, perform logout.
-2. On Device 2, refresh or access protected resources using the same injected authenticaton artifact value.
+2. On Device 2, refresh or access protected resources using the same injected authentication artifact value.
 
 Expected Result:
 
 
@@ -382,7 +382,7 @@ $result1 = odbc_exec($conn, $query2);
                                         ||
                                         \/
                                  the payload that
-                                  get's injected
+                                  gets injected
                                into the second query
   \________________________________________________________/
                               ||
 
@@ -155,7 +155,7 @@ It is also advisable to pay attention to the use of the `@ModelAttribute` annota
 
 #### PHP
 
-Laravel Eloquent ORM provides a `create` method which allows automatic assignment of attributes. However, the latest versions of Eloquent ORM provide default protection against mass assignment vulnerabilities requiring to explicitly specify allowed attributes that can be assigned automatically, through the `$fillable` array, or attributes that have to be protected (non-bindable), trough the `$guarded` array. Therefore by analyzing the models (classes that extend the `Model` class) it is possible to identify which attributes are allowed or denied and therefore point out potential vulnerabilities.
+Laravel Eloquent ORM provides a `create` method which allows automatic assignment of attributes. However, the latest versions of Eloquent ORM provide default protection against mass assignment vulnerabilities requiring to explicitly specify allowed attributes that can be assigned automatically, through the `$fillable` array, or attributes that have to be protected (non-bindable), through the `$guarded` array. Therefore by analyzing the models (classes that extend the `Model` class) it is possible to identify which attributes are allowed or denied and therefore point out potential vulnerabilities.
 
 #### .NET
 
 
@@ -115,7 +115,7 @@ private static byte[] pbkdf2(char[] password, byte[] salt, int iteration
 
 ```text
 User related keywords: name, root, su, sudo, admin, superuser, login, username, uid
-Key related keywords: public key, AK, SK, secret key, private key, passwd, password, pwd, share key, shared key, cryto, base64
+Key related keywords: public key, AK, SK, secret key, private key, passwd, password, pwd, share key, shared key, crypto, base64
 Other common sensitive keywords: sysadmin, root, privilege, pass, key, code, master, admin, uname, session, token, Oauth, privatekey, shared secret
 ```
 
 
@@ -75,7 +75,7 @@ Example:
 ### Test Application on Compatibility and Accessibility Mode
 
 Mobile versions of the web page are usually smaller and faster than the desktop ones, and they have to be less complex than the main application. Mobile variants often have less protection. However, an attacker can fake the real origin given by a web browser, and a non-mobile victim may be able to visit an application made for mobile users. This scenario could allow the attacker to exploit a mobile version of the web page.
-Applications running on acessibility mode should also be tested against clickjacking, because site framming could be affected.
+Applications running on accessibility mode should also be tested against clickjacking, because site framing could be affected.
 
 ### Server-Side Protection: Using Frame-Ancestors Directive of Content Security Policy
 
 
@@ -55,7 +55,7 @@ For time-boxed engagements, request machine-readable API artifacts from the cust
 
 ### API Directories
 
-Alternatives sources of API documentation can incluide API Directories, such as:
+Alternative sources of API documentation can include API Directories, such as:
 
 - GitHub in general
 - [GitHub Public APIs Repository](https://github.com/public-apis/public-apis)