XXE ArticleXXE Definition XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server fi...3 min read·tahaben.hashnode.devMar 10
Spring security authenticationSpring security authentication بِسْمِ ٱللّٰهِ ٱلرَّحْمٰنِ ٱلرَّحِيمِ In the previous article, we saw how Spring Security builds its filter chain and how every request marches through it. But we left o4 min read·tahaben.hashnode.devMar 10
Spring security architectureSpring security architecture بِسْمِ ٱللّٰهِ ٱلرَّحْمٰنِ ٱلرَّحِيمِ I begin my journey of learning spring security 3 months ago. I copy-pasted from a tutorial, it worked, and I felt like a fraud. The c5 min read·tahaben.hashnode.devMar 10
Path traversalPath traversal What is path traversal? Path traversal is also known as directory traversal. These vulnerabilities enable an attacker to read arbitrary files on the server that is running an applicatio7 min read·tahaben.hashnode.devMar 10
OS command injectionOS command injection What is command injection? Command injection is a vulnerability that allows an attacker to execute operating system (OS) commands on the server that is running an application. A s2 min read·tahaben.hashnode.devMar 10
