Web Security Basics

Web challenges focus on how data moves from the browser to the server and where trust breaks down.

In progress

This category is being written. Planned topics:

HTTP, cookies and the same-origin policy
SQL injection, XSS, CSRF and SSRF
File upload, path traversal and local file inclusion
SSTI, deserialization and prototype pollution
JWT, OAuth and authentication bypass
Common framework and middleware vulnerabilities

Study tips

Learn to read HTTP requests and responses with browser developer tools.
Use Python to automate repetitive requests.
Build a local lab and reproduce each vulnerability instead of memorizing payloads.