--- title: "#owasp-top-10 articles | Hashnode" description: "Explore 122 articles tagged #owasp-top-10 on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/owasp-top-10" --- Tag # #owasp-top-10 122 posts · 26 followers [bo](https://hashnode.com/@cicada-369) · [Oct 28](https://hashnode.com/posts/your-agents-skills-are-code-audit-them/6ae24ed7f5f7d3b0c5394aa8) ### [Your Agent's Skills Are Code. Audit Them.](https://bokaung.hashnode.dev/your-agents-skills-are-code-audit-them?utm_source=hashnode&utm_medium=feed) If you use Claude Skills or Claude Code plugins, you are running code and instructions you probably have not reviewed. I know I was: dozens installed, and no good answer to a simple question — what ca 9 min read · [bokaung.hashnode.dev](https://bokaung.hashnode.dev/your-agents-skills-are-code-audit-them?utm_source=hashnode&utm_medium=feed) [Oluwaseyi Fatunmole](https://hashnode.com/@foluwaseyi) · [Oct 15](https://hashnode.com/posts/secure-by-design-engineer-security-into-architecture-before-writing-code/6ad05dd81f613b7136df1683) ### [Secure by Design: How to Engineer Security into Architecture Before Writing Any Code](https://freecodecamp.org/news/secure-by-design-engineer-security-into-architecture-before-writing-code?utm_source=hashnode&utm_medium=feed) There's a conversation that happens in most engineering teams,maybe usually too late. Think of this, a feature ships to production. A security review happens afterwards, or a penetration test finds so 32 min read · [freecodecamp.org](https://freecodecamp.org/news/secure-by-design-engineer-security-into-architecture-before-writing-code?utm_source=hashnode&utm_medium=feed) [Oluwaseyi Fatunmole](https://hashnode.com/@foluwaseyi) · [Oct 5](https://hashnode.com/posts/engineering-anatomy-of-api-vulnerabilities-owasp-api-security-top-10/6ac381f06fd156dcaf4d765b) ### [The Engineering Anatomy of API Vulnerabilities: A Deep Dive into the OWASP API Security Top 10](https://freecodecamp.org/news/engineering-anatomy-of-api-vulnerabilities-owasp-api-security-top-10?utm_source=hashnode&utm_medium=feed) Most security articles read like threat reports. They describe vulnerabilities from the outside looking in: what an attacker does, what the impact is, and how many systems are affected globally. That' 27 min read · [freecodecamp.org](https://freecodecamp.org/news/engineering-anatomy-of-api-vulnerabilities-owasp-api-security-top-10?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Sep 6](https://hashnode.com/posts/challenge-hammer-tryhackme/6a9d358135f33243e974c1c8) ### [Challenge: Hammer (TryHackMe)](https://www.sharonjebitok.com/challenge-hammer-tryhackme?utm_source=hashnode&utm_medium=feed) Challenge on TryHackMe: Hammer Introduction Hammer is a web-focused THM challenge that chains together several small missteps into a full authentication bypass and RCE. The box exposes a login portal 8 min read · [sharonjebitok.com](https://www.sharonjebitok.com/challenge-hammer-tryhackme?utm_source=hashnode&utm_medium=feed) [Sunny](https://hashnode.com/@sunny1103) · [Aug 26](https://hashnode.com/posts/tryhackme-broken-access-control-room-comprehensive-learning-guide-deep-dive/6a8f0512386e7883f58e00eb) ### [TryHackMe Broken Access Control Room: Comprehensive Learning Guide & Deep Dive](https://cybersecurity-learning.hashnode.dev/tryhackme-broken-access-control-room-comprehensive-learning-guide-deep-dive?utm_source=hashnode&utm_medium=feed) Understanding web application authorization mechanisms, access control models (DAC, MAC, RBAC, ABAC), intercepting and analyzing HTTP traffic using Burp Suite Proxy, parameter manipulation, IDOR vectors, vertical and horizontal privilege escalation, and enterprise server-side remediation strategies through the TryHackMe Broken Access Control room. 10 min read · [cybersecurity-learning.hashnode.dev](https://cybersecurity-learning.hashnode.dev/tryhackme-broken-access-control-room-comprehensive-learning-guide-deep-dive?utm_source=hashnode&utm_medium=feed) [Kamran Shaghaghi](https://hashnode.com/@kam-secops) · [Aug 20](https://hashnode.com/posts/containing-autonomous-ai-mitigating-owasp-llm03-excessive-agency-with-hardened-linux-security-contexts-and-gke-dataplane-v2/6a86498b878af9f3764f895b) ### [Containing Autonomous AI: Mitigating OWASP LLM03 (Excessive Agency) with Hardened Linux Security Contexts and GKE Dataplane V2](https://cloudironguard.hashnode.dev/containing-autonomous-ai-mitigating-owasp-llm03-excessive-agency-with-hardened-linux-security-contexts-and-gke-dataplane-v2?utm_source=hashnode&utm_medium=feed) Mitigate OWASP LLM03 Excessive Agency in autonomous AI agents using hardened GKE Linux security contexts and Cilium eBPF policies. 10 min read · [cloudironguard.hashnode.dev](https://cloudironguard.hashnode.dev/containing-autonomous-ai-mitigating-owasp-llm03-excessive-agency-with-hardened-linux-security-contexts-and-gke-dataplane-v2?utm_source=hashnode&utm_medium=feed) [Kamran Shaghaghi](https://hashnode.com/@kam-secops) · [Aug 17](https://hashnode.com/posts/mitigating-owasp-llm10-gke-dataplane-v2-ebpf/6a826fe060330f897d41a11c) ### [Defending the AI Perimeter: Mitigating OWASP LLM10 (Model Theft & Data Exfiltration) with GKE Dataplane V2 and eBPF](https://cloudironguard.hashnode.dev/mitigating-owasp-llm10-gke-dataplane-v2-ebpf?utm_source=hashnode&utm_medium=feed) Prevent OWASP LLM10 data exfiltration and model theft in RAG agents using GKE Dataplane V2 eBPF kernel network policies. 8 min read · [cloudironguard.hashnode.dev](https://cloudironguard.hashnode.dev/mitigating-owasp-llm10-gke-dataplane-v2-ebpf?utm_source=hashnode&utm_medium=feed) [Sunny](https://hashnode.com/@sunny1103) · [Aug 10](https://hashnode.com/posts/tryhackme-owasp-top-10-2025-insecure-data-handling-beginner-friendly-learning-guide/6a79c862cf89074e1a497718) ### [TryHackMe OWASP Top 10 2025: Insecure Data Handling Beginner-Friendly Learning Guide](https://cybersecurity-learning.hashnode.dev/tryhackme-owasp-top-10-2025-insecure-data-handling-beginner-friendly-learning-guide?utm_source=hashnode&utm_medium=feed) Understanding cryptographic failures, injection, software or data integrity failures, insecure data handling, and secure web application practices through the TryHackMe OWASP Top 10 2025: Insecure Data Handling room. 15 min read · [cybersecurity-learning.hashnode.dev](https://cybersecurity-learning.hashnode.dev/tryhackme-owasp-top-10-2025-insecure-data-handling-beginner-friendly-learning-guide?utm_source=hashnode&utm_medium=feed) [Uday Bhale](https://hashnode.com/@rudraub) · [Aug 2](https://hashnode.com/posts/recruitex-web-sec-assessment-part1/6a6f5b4141cb1abb56011267) ### [RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)](https://hackwithrudraub.hashnode.dev/recruitex-web-sec-assessment-part1?utm_source=hashnode&utm_medium=feed) Learn web pentesting from Nmap reconnaissance to LAMP fingerprinting, Gobuster enumeration, API discovery, and IDOR in Part 1. 5 min read · [hackwithrudraub.hashnode.dev](https://hackwithrudraub.hashnode.dev/recruitex-web-sec-assessment-part1?utm_source=hashnode&utm_medium=feed) [Sunny](https://hashnode.com/@sunny1103) · [Jul 30](https://hashnode.com/posts/tryhackme-owasp-top-10-2025-application-design-flaws-beginner-friendly-learning-guide/6a6b6836f8342f685ba95f43) ### [TryHackMe OWASP Top 10 2025: Application Design Flaws Beginner-Friendly Learning Guide](https://cybersecurity-learning.hashnode.dev/tryhackme-owasp-top-10-2025-application-design-flaws-beginner-friendly-learning-guide?utm_source=hashnode&utm_medium=feed) Understanding security misconfigurations, software supply chain failures, cryptographic failures, insecure design, and secure application design through the TryHackMe OWASP Top 10 2025: Application Design Flaws room. 16 min read · [cybersecurity-learning.hashnode.dev](https://cybersecurity-learning.hashnode.dev/tryhackme-owasp-top-10-2025-application-design-flaws-beginner-friendly-learning-guide?utm_source=hashnode&utm_medium=feed)