web-security

4 posts

Authentication Attacks: Passwords, Sessions, and Tokens

How login systems break - brute force, credential stuffing, session hijacking, token flaws, and MFA bypass. The complete beginner's guide to auth attacks.

tutorial fundamentals ground-up +2

Jan 30, 2026 · 10 min read

How Web Applications Work (Before You Break Them)

Client-server architecture, request flow, cookies, sessions, and APIs. You need to understand the machine before you can find the cracks.

tutorial fundamentals ground-up +1

Jan 30, 2026 · 10 min read

SQL Injection Explained: Talking to Databases You Shouldn't

How SQL injection works, why it's devastating, and how to prevent it. From basic injection to blind SQLi, explained for beginners.

tutorial fundamentals ground-up +1

Jan 30, 2026 · 9 min read

Your First Vulnerability: Understanding XSS

Cross-Site Scripting explained from scratch - what it is, the three types, how attackers exploit it, and how to prevent it. With safe practice labs.

tutorial fundamentals ground-up +1

Jan 30, 2026 · 8 min read