Beyond the Login Screen: Securing Session Tokens, JWTs, and Cookies After Authentication
The short version: store access tokens in JavaScript memory, put refresh tokens in HttpOnly/Secure/SameSite cookies, ro…
#XSS
5 posts
Mastering Web Security: A Deep Dive into Damn Vulnerable Web App (DVWA) on Kali Linux
Introduction In the ever-evolving landscape of cybersecurity, hands-on experience is paramount. While theoretical knowl…
Mastering Web Vulnerabilities: A Kali Linux Guide to bWAPP with Docker
Unveiling bWAPP – Your Bee-autifully Buggy Web Application for Security Training In the dynamic world of cybersecurity,…
Hack This App (Safely!): Your Docker Sandbox for Web Security
Introduction Mutillidae II, an intentionally vulnerable web application, stands as a cornerstone in the realm of web se…
Reflected XSS: Understanding, Detecting, and Defending Against This Common Web Threat
Understanding Reflected Cross-Site Scripting (XSS) Reflected XSS is a common web security vulnerability that occurs whe…