Web Hacking → All Web Hacking articles
The login form is just one door, and it is rarely the weakest. This is the full field guide to getting in without the password: SQ…
Run someone else’s JavaScript inside your own Node process and call it a “sandbox,” and you’ve already lost — you just don’t know …
The sandbox attribute is the browser’s built-in jail for untrusted HTML — it strips scripts, origin, forms, popups, …
SPAs push a huge surface into the browser, and every server-side mental model breaks on the way. Route guards aren't auth, tokens …
XSS is just a foothold — BeEF turns the hooked browser into a remote-controlled pivot. Hook.js polling, command modules, fingerpri…
Two bug classes that slip past sanitizers without ever using a script tag. DOM clobbering shadows JavaScript globals via named HTM…
JWT validation has been a steady source of CVEs since 2015, because the header itself decides how the token gets verified — change…
How one missing __proto__ check in lodash.merge turns user-supplied JSON into RCE on every Node service downstream of it. The Java…
How a single HTTP header decides whether your XSS becomes a footnote or a CVE. A deep walk through CSP1/2/3 grammar, nonce and has…
A browser feature that bypasses SOP, CORS and most WAFs the moment the 101 lands. The HTTP→WS handshake byte by byte, then Cross-S…