Web Hacking → Auth & Sessions
Injection was the easy half — the sink is a function you can grep. The dangerous findings have no sink: broken access control, IDO…
Once you are logged in, the session cookie IS your password. This is the full field guide to stealing it: hijacking, sidejacking, …
They sound almost the same. They even share a nickname — “auth.” And that’s half the reason people keep mixing them up. But they’r…
A JSON Web Token is your “I’m logged in” badge for stateless APIs. The catch: the part that says who you are is just Base64 — read…
Almost every real OAuth/OIDC bug lives in the gaps the spec leaves to implementers. The Authorization Code flow first, then redire…
How modern auth actually works: sessions vs tokens, JWT structure byte by byte, OAuth 2.0 flows (with PKCE), OpenID Connect, every…