ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·Aug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 10
NPNarges Pourkamaliinsafeai.blog·Aug 11 · 12 min read10 Rules for Secure Database Schema Design (Before Writing Any Code)My study on secure architecture awareness continues! This time, I examined the most fundamental layer: Database Schema Design. Are you a Back-End Developer? What security considerations do you make wh30
VWVictor Wariboko-Westincybersage.hashnode.dev·Aug 1 · 5 min read7 Security Mistakes Junior Developers Make (And How to Fix Them)Security is not exactly taught in the same way syntax and frameworks are. Most junior developers learn it the hard way: after a bug is reported, a client sends an angry email or a 3 a.m Slack message 00
KRKishore Rinkishorecybersec.hashnode.dev·Jul 25 · 6 min readWhat Is SQL Injection? How It Works and How to Prevent ItIntroduction Whether it's usernames, passwords, financial transactions, and customer records, web apps store an incredible quantity of information each day. A lot of these applications utilize databas10
MNMilan Nikicinsecuritydepth.hashnode.dev·Jul 20 · 22 min readFile Upload Vulnerabilities in Java and Spring: Secure Coding PatternsBuild web apps long enough and file uploads become unavoidable. Profile pictures. PDF invoices. CSV imports. Resume uploads. Log bundles for support. Every time an application lets users send bytes an00
VWVictor Wariboko-Westincybersage.hashnode.dev·Jul 18 · 5 min readAI Is Writing Your Code. Who's Auditing It for Security Holes?Something shifted in how software gets built. Quietly, quickly and without a lot of debate. Developers today (junior and senior alike) are using AI tools like GitHub Copilot, ChatGPT and Claude to wri00
AKAyush Kumarinayushkumar912.hashnode.dev·Jul 7 · 10 min readContext Engineering for Coding Agents: What Anthropic and OpenAI's Guidance Actually ImpliesRoot cause: context is a finite, decaying resource Strip the vendor-specific vocabulary and both companies are describing the same failure mode you'd recognize from any stateful system: a bounded reso00
RARJ Abellinricocyberstack.hashnode.dev·Jun 25 · 8 min readWeb Development Still Fails Cybersecurity BasicsIn most university capstone presentations, startup MVP demonstrations, or freelance web development showcases, developers tend to prioritize functionality, aesthetics, and delivery speed, often neglec00
SKSreeram K Sincode-as-a-story.hashnode.dev·Jun 20 · 6 min readWhat is XSS (Cross-Site Scripting)?Story Time Imagine your office has a public notice board where anyone can walk up and pin messages like “Team lunch at 1 PM” and “Meeting moved to 3 PM”. Everyone trusts this board and whatever is wri00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jun 8 · 5 min readRender & Plunder - dalCTF 2026Challenge: Render & PlunderCategory: Web Security / Defense Challenge Description I wrote a user-profile service with a nice renderer for myself. Surely it's secure, right? Take a look and patch any00
