Jun 6, 2026
OWASP Top 10
Almost everyone in security can name it. Far fewer can say what it actually is. It is not a list of bugs to grep for — it is the t…
Web Hacking → All Web Hacking articles
Almost everyone in security can name it. Far fewer can say what it actually is. It is not a list of bugs to grep for — it is the t…
Somewhere on the app there is a harmless little tool — ping a host, look up a domain, export a PDF. Behind it, a developer glued y…
A bug from the 1990s that still leaks databases today. The whole thing comes down to one idea: making the app read your input as i…
SQL injection tricks a database. XSS tricks a browser — someone else’s. The whole game is getting your JavaScript to run in a vict…
Most bugs let you talk to the server. SSRF lets you make the server talk for you — to places you could never reach yourself. And t…