Web Application Attacks

The crucial phase of attacking an application is in reconnaissance or information gathering. The more info we have at hand the more are the chances of getting successful with attacks or exploits. The one useful […]

when developing a software application or an interface for the business, to satisfy the business requirements, the developers may be required to write an application code that handles sensitive data, file systems or even manage […]

This article outlines the steps required to set up OWASP ZAP & run web application scans to discover security violations if any present in the application. This article & all content published on this site […]

In this lesson, we will teach you all you need to know about file traversal attacks. Of course, we will start from the beginning, understand this issue, then, later on, we will learn how to […]

In this article, we will talk about the special type of Server-side Request Forgery attack, which is also known as SSRF. I will introduce you how XML external entity injection works and what are the […]

We will talk here about the Cross-site scripting kinds of attacks, or if you prefer-XSS attacks. If you are long enough into a tech’s world, there is no way that you haven’t heard about XSS […]

Here, we will discuss the little-known evil side of JavaScript! You probably know that ever since it appeared, JavaScript gained so much traction in the world of the software development. I will introduce you to […]

I will now introduce you something a little bit different than most vulnerabilities and injections. I am going to talk about the HTML5’s cross-origin resource for sharing, which is also known under a name CORS. […]

In this lesson, we will introduce you to the SQL injection, its issues impact and of course teach you how to fix it. Besides that, we will take a look how such attacks seems like […]