Web Hacking → All Web Hacking articles
Hand review finds the deep bugs; SAST finds the shallow ones at scale. We cover how static analysis works — pattern matching versu…
Injection was the easy half — the sink is a function you can grep. The dangerous findings have no sink: broken access control, IDO…
The methodology gave you sources, sinks and taint; now we put it to work on real source, spotting the injection family by eye. For…
A pentest sees the paths you stumble into; a code review sees them all. This is the offensive code-review methodology — stop readi…
The login form is just one door, and it is rarely the weakest. This is the full field guide to getting in without the password: SQ…
Once you are logged in, the session cookie IS your password. This is the full field guide to stealing it: hijacking, sidejacking, …
Run someone else’s JavaScript inside your own Node process and call it a “sandbox,” and you’ve already lost — you just don’t know …
An Electron app is a web page wearing a native costume — Chromium on top, full Node.js underneath. When the two layers are fused t…
The sandbox attribute is the browser’s built-in jail for untrusted HTML — it strips scripts, origin, forms, popups, …
Someone wraps eval() in a blacklist, strips __builtins__, and calls it a sandbox. Then a CTF player types a thirty-character objec…