Web Security

Posts tagged "Web Security"

11 posts found

Cybersecurity Prototype Pollution Web Security

Featured

Prototype Pollution: Engine Internals, Node.js Gadget Chains, and Hardening Architecture

A deep technical dissection of JavaScript prototype pollution: V8 object shapes, server-side gadget chains in Node.js child_process and template engines, client-side DOM vectors, and strong runtime mitigations.

Oct 06, 2026

13 min read

2,587 words

İS

ibrahimsql

Cybersecurity Engineer

Burp Suite Web Security Tutorials

Featured

Burp Suite Proxy, Repeater, and Intruder: Intercepting and Replaying Web Requests

How Burp Suite Proxy, Repeater, and Intruder handle traffic interception and request replay, and where each fits in a manual web test.

Nov 29, 2025

10 min read

1,948 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Web Security Tutorials

OWASP Top 10: What Each Risk Category Covers

The ten OWASP risk categories summarized: from Broken Access Control to Injection, with prevention pointers.

Nov 28, 2025

11 min read

2,113 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Web Security Bug Bounty

WordPress Attack Surface: Plugins, Themes, and Core Misconfigurations

Where WordPress findings usually come from: plugin and theme flaws plus core misconfigurations, and how testers narrow that surface.

Nov 20, 2025

10 min read

1,986 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Cloud Security Pentesting

AWS Penetration Testing Notes: S3, IAM, and Lambda Misconfigurations

Common AWS findings: exposed S3 buckets, IAM misconfigurations, and Lambda weaknesses, grouped by service.

Nov 19, 2025

10 min read

1,970 words

İS

ibrahimsql

Cybersecurity Engineer

XSS Web Security Bug Bounty

Featured

XSS Types Compared: Reflected, Stored, and DOM-Based Behavior

How reflected, stored, and DOM-based XSS differ in delivery and execution, with prevention notes tied to each type.

Oct 20, 2025

11 min read

2,102 words

İS

ibrahimsql

Cybersecurity Engineer

Web Security Penetration Testing Ethical Hacking

Featured

SQL Injection: Types, Manual Detection, and Parameterized Queries

In-band, blind, and out-of-band SQL injection compared, with manual detection notes and parameterized-query prevention.

Oct 15, 2025

10 min read

1,852 words

İS

ibrahimsql

Cybersecurity Engineer

Web Security Bug Bounty Cybersecurity

Featured

Web Hacking: Client-Side and Server-Side Vulnerability Classes

A map of web vulnerability classes, split by client-side and server-side, for planning what to study next.

Feb 15, 2025

11 min read

2,024 words

İS

ibrahimsql

Cybersecurity Engineer

Web Security Cybersecurity

Attacking Secondary Contexts in Web Applications

Secondary contexts testers check after the main flow: log files, admin panels, and background jobs.

Feb 10, 2025

12 min read

2,271 words

İS

ibrahimsql

Cybersecurity Engineer

Cybersecurity Web Security

Bypassing WAFs with Unicode Compatibility

When a WAF inspects input before Unicode normalization but the backend processes it after, compatibility characters can slip through.

Feb 05, 2025

10 min read

1,951 words

İS

ibrahimsql

Cybersecurity Engineer

XSS Cybersecurity Reverse Engineering

Zero-Interaction XSS: Payloads in Metadata, Filenames, and API Responses

XSS vectors that trigger without a click: metadata, filenames, and API responses rendering unsanitized content.

Jul 29, 2024

11 min read

2,189 words

İS

ibrahimsql

Cybersecurity Engineer

Posts tagged "Web Security"

Other Tags