--- title: "#client-side-security articles | Hashnode" description: "Explore 12 articles tagged #client-side-security on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/client-side-security" --- Tag # #client-side-security 12 posts · 0 followers [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 9](https://hashnode.com/posts/tryhackme-cyberheroes-writeup/6aa17b15c4ce9de4f339009f) ### [TryHackMe - CyberHeroes Writeup](https://exploitnotes.hashnode.dev/tryhackme-cyberheroes-writeup?utm_source=hashnode&utm_medium=feed) CyberHeros TryHackMe writeup covering client-side authentication, hardcoded credentials, JS password reversal, predictable flag paths, and web flaws. 4 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-cyberheroes-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 1](https://hashnode.com/posts/webversepro-snowedout-writeup/6a96cbdf9d4951f2dcb9645a) ### [WebVersePro : SnowedOut writeup](https://exploitnotes.hashnode.dev/webversepro-snowedout-writeup?utm_source=hashnode&utm_medium=feed) SnowedOut on WebVerseLabs Pro: exploit Pinehollow Plow Tracker with JavaScript injection and forged CSP reports to retrieve the flag. 6 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/webversepro-snowedout-writeup?utm_source=hashnode&utm_medium=feed) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 14](https://hashnode.com/posts/client-side-web-security-essentials/6a7f33383b0e0f5ca46f1155) ### [Client-Side Web Security Essentials](https://webpentestingdeepdive.hashnode.dev/client-side-web-security-essentials?utm_source=hashnode&utm_medium=feed) Learn how HTML, JavaScript, DOM, Ajax, JSON, forms, cookies, and sessions shape web applications and their security attack surface. 8 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/client-side-web-security-essentials?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Jul 18](https://hashnode.com/posts/fam-ctf-the-library-to-the-endpoint-writeup/6a5b6f3e4a4fe3fd42a6cd96) ### [FAM CTF: The Library to The Endpoint Writeup](https://exploitnotes.hashnode.dev/fam-ctf-the-library-to-the-endpoint-writeup?utm_source=hashnode&utm_medium=feed) Solve the FAM Android Firebase CTF by reversing an APK, bypassing Firebase Auth, App Check, native signing, and recovering all four flags. 13 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/fam-ctf-the-library-to-the-endpoint-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Jul 17](https://hashnode.com/posts/hackthebox-waywitch-writeup/6a5a2e462f7c746635afda2a) ### [HackTheBox : WayWitch Writeup](https://exploitnotes.hashnode.dev/hackthebox-waywitch-writeup?utm_source=hashnode&utm_medium=feed) Learn how the WayWitch challenge was solved by exploiting a leaked JWT signing secret to forge an admin token and access the hidden flag safely. 4 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/hackthebox-waywitch-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Jul 12](https://hashnode.com/posts/broncoctf-unblur-me-writeup/6a53d52399264df1fd2c8cdb) ### [BroncoCTF : Unblur me Writeup](https://exploitnotes.hashnode.dev/broncoctf-unblur-me-writeup?utm_source=hashnode&utm_medium=feed) Solve Unblur Me by bypassing the client-side quiz, fetching the hidden PNG directly, and revealing the BroncoCTF flag without solving calculus. 4 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/broncoctf-unblur-me-writeup?utm_source=hashnode&utm_medium=feed) [Wiktoria Blomgren Strandberg](https://hashnode.com/@wikipedia01) · [Mar 14](https://hashnode.com/posts/csp-bypass/69b59165210c74252f0bad5d) ### [CSP Bypass in DVWA](https://pentesting-dvwa.hashnode.dev/csp-bypass?utm_source=hashnode&utm_medium=feed) Documented penetration test of CSP Bypass vulnerability in DVWA. 16 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/csp-bypass?utm_source=hashnode&utm_medium=feed) [techno kraft](https://hashnode.com/@onlinetoolsx) · [Dec 23, 2025](https://hashnode.com/posts/building-a-zero-knowledge-rsa-tool-crafting-the-ultimate-client-side-encryption-demo/69574f9dfdafcac5b1ded74b) ### [Building a "Zero-Knowledge" RSA Tool: Crafting the Ultimate Client-Side Encryption Demo](https://onlinetoolsx.hashnode.dev/building-a-zero-knowledge-rsa-tool-crafting-the-ultimate-client-side-encryption-demo?utm_source=hashnode&utm_medium=feed) A Living Laboratory for RSA. You can input a message, encrypt it with a public key, and then use the private key to bring it back to life. 1 min read · [onlinetoolsx.hashnode.dev](https://onlinetoolsx.hashnode.dev/building-a-zero-knowledge-rsa-tool-crafting-the-ultimate-client-side-encryption-demo?utm_source=hashnode&utm_medium=feed) [INDRAYAN SANYAL](https://hashnode.com/@indrsany) · [May 24, 2025](https://hashnode.com/posts/understanding-client-side-security-vulnerabilities/6831f0351a2ddec6f41f7fc3) ### [Understanding Client-Side Security Vulnerabilities](https://securityidiotss.hashnode.dev/understanding-client-side-security-vulnerabilities?utm_source=hashnode&utm_medium=feed) In today's web applications, client-side code plays an increasingly significant role. With JavaScript driving more of the interactive experience within browsers, it has also become a lucrative target for attackers. This blog post dives into some of t... 5 min read · [securityidiotss.hashnode.dev](https://securityidiotss.hashnode.dev/understanding-client-side-security-vulnerabilities?utm_source=hashnode&utm_medium=feed) [Jahid Hasan Shanto](https://hashnode.com/@jhs575) · [Mar 16, 2025](https://hashnode.com/posts/client-side-vs-server-side-scriptingprogramming-and-apache/67d645e896ca132810b33b97) ### [Client-Side vs. Server-Side Scripting/Programming & Apache](https://notes.shanto.dev/client-side-vs-server-side-scriptingprogramming-and-apache?utm_source=hashnode&utm_medium=feed) Discover the differences between client-side and server-side scripting, their technologies, and how Apache enhances web development 4 min read · [notes.shanto.dev](https://notes.shanto.dev/client-side-vs-server-side-scriptingprogramming-and-apache?utm_source=hashnode&utm_medium=feed)