HHackitainfreecodecamp.org·Sep 29 · 10 min readHow ORMs Still Let SQL Injection Through (and How to Close the Gaps)A lot of developers assume that once they're on an ORM, SQL injection stops being their problem. But it doesn't disappear. It just relocates. ORMs like Sequelize, Prisma, TypeORM, and Knex parameteriz00
HHackitainfreecodecamp.org·Jul 15 · 19 min readHow to Fix Common Web Application Security Vulnerabilities in Node.jsHere's something that tends to surprise developers who are new to security: most web vulnerabilities aren't the result of sophisticated attacks. They come from code patterns that look completely reaso00
HHackitainhack-ita.hashnode.dev·May 13 · 2 min readHashcat: GPU Password Cracking for Penetration Testers" subtitle: "From NTLM hashes to bcrypt — a practical guidehttps://hackita.it/articoli/hashcat When you capture a hash during a pentest, cracking it quickly can make the difference between a dead end and full domain compromise. Hashcat is the go-to tool for t00