Tag feed

#owasp

236 posts20 followers

Explore Hashnode

Alternatives

Trending tags this week

MNMilan Nikicsecuritydepth.hashnode.dev13h ago · 22 min read

File Upload Vulnerabilities in Java and Spring: Secure Coding Patterns

Build web apps long enough and file uploads become unavoidable. Profile pictures. PDF invoices. CSV imports. Resume uploads. Log bundles for support. Every time an application lets users send bytes an

0

PKPatrick Kearnsfullstackcity.com2d ago · 10 min read

Preventing Broken Object Level Authorisation in ASP.NET Core APIs

An authenticated user calls your API with a valid access token. The token contains the right role and the endpoint requires authorisation. Everything appears secure. The user then changes /claims/8d61

0

PKPatrick Kearnsfullstackcity.com3d ago · 12 min read

Building SSRF-Resistant HTTP Clients in .NET

Applications increasingly accept URLs from outside their own code. A webhook tester calls an endpoint supplied by a customer. An image service downloads a remote avatar. A document pipeline retrieves

0

HHackitafreecodecamp.org4d ago · 19 min read

How to Fix Common Web Application Security Vulnerabilities in Node.js

Here's something that tends to surprise developers who are new to security: most web vulnerabilities aren't the result of sophisticated attacks. They come from code patterns that look completely reaso

0

AAbhinavlog.page0.dev5d ago · 2 min read

LAB #04 Basic password reset poisoning

Lab Overview This lab is vulnerable to password reset poisoning. The user carlos will carelessly click on any links in emails that he receives. To solve the lab, log in to Carlos's account. You can lo

0

Vvenkatabhargav229bhargav19.hashnode.dev5d ago · 9 min read

How I Built a Self-Hosted AI Agent to Scan GitHub PRs for OWASP Vulnerabilities

The Problem I Was Trying to Solve When developers push code changes, someone should review that code for security issues. Things like SQL injection, hardcoded passwords, or broken authentication logic

0

HSHarshal Shahdelvingwithharshal.hashnode.dev6d ago · 6 min read

OWASP Top 10 for LLM Applications: Security Risks Every AI User Should Know

Introduction Large Language Models (LLMs) such as ChatGPT, Gemini, Claude, and GitHub Copilot have revolutionized the way individuals and organizations interact with technology. From content creation

0

YPYogeshwar Peelaexploitnotes.hashnode.dev6d ago · 9 min read

HackTheBox : JinjaCare

Summary JinjaCare is a Flask-based COVID-19 vaccination verification web app. The intended path chains wkhtmltopdf HTML/local-file injection (via the certificate-generation feature) to disclose the Fl

0

SSunnycybersecurity-learning.hashnode.devJul 11 · 15 min read

TryHackMe Introduction to OWASP ZAP Beginner-Friendly Learning Guide

Introduction I recently completed the Introduction to OWASP ZAP room on TryHackMe as part of my ongoing cybersecurity learning journey. OWASP ZAP, also known as Zed Attack Proxy, is an open-source web

0

EAElham Ajdarielham-notes.hashnode.devJul 8 · 6 min read

Security Vulnerabilities in Frontend Projects: A Simple Guide

Audience: Developers new to security Stack: JavaScript / Angular / Node.js / pnpm projects Introduction Modern frontend apps use many third-party packages. When you run: pnpm install you are not onl

0

#owasp

Search Hashnode

#owasp

Explore Hashnode

Trending tags this week

File Upload Vulnerabilities in Java and Spring: Secure Coding Patterns

Preventing Broken Object Level Authorisation in ASP.NET Core APIs

Building SSRF-Resistant HTTP Clients in .NET

How to Fix Common Web Application Security Vulnerabilities in Node.js

LAB #04 Basic password reset poisoning

How I Built a Self-Hosted AI Agent to Scan GitHub PRs for OWASP Vulnerabilities

OWASP Top 10 for LLM Applications: Security Risks Every AI User Should Know

HackTheBox : JinjaCare

TryHackMe Introduction to OWASP ZAP Beginner-Friendly Learning Guide

Security Vulnerabilities in Frontend Projects: A Simple Guide