Web Hacking → All Web Hacking articles
Hand review finds the deep bugs; SAST finds the shallow ones at scale. We cover how static analysis works — pattern matching versu…
Injection was the easy half — the sink is a function you can grep. The dangerous findings have no sink: broken access control, IDO…
The methodology gave you sources, sinks and taint; now we put it to work on real source, spotting the injection family by eye. For…
A pentest sees the paths you stumble into; a code review sees them all. This is the offensive code-review methodology — stop readi…
Once you are logged in, the session cookie IS your password. This is the full field guide to stealing it: hijacking, sidejacking, …
An Electron app is a web page wearing a native costume — Chromium on top, full Node.js underneath. When the two layers are fused t…
Someone wraps eval() in a blacklist, strips __builtins__, and calls it a sandbox. Then a CTF player types a thirty-character objec…
You dropped a web shell, typed system('id') — and got nothing. The exec family is disabled, open_basedir walls o…
They sound almost the same. They even share a nickname — “auth.” And that’s half the reason people keep mixing them up. But they’r…
A JSON Web Token is your “I’m logged in” badge for stateless APIs. The catch: the part that says who you are is just Base64 — read…