© 2026 Hashnode
NOTE: This post is for educational purposes only. Please use the information responsibly and legally. While solving an XSS lab, I followed a simple and repeatable methodology that helped me identify how user input was being handled and where script ...

NOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Improper File Upload Validation / Security Misconfiguration) While testing example.com using Burp Suite, I found a common but often overlooked sec...

NOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Missing Security Header – HSTS) While testing a website using Burp Suite, I found a common but often ignored security issue:HTTP Strict Transport ...

NOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Missing Rate Limiting Protection)While testing a website using Burp Suite, I found a common but serious security issue:No rate limiting was impleme...

NOTE: This post is for educational purposes only. Please use the information responsibly and legally. (Missing Secure Flag) While testing a website with Burp Suite, I found a simple but important security issue:Sensitive cookies were missing the Sec...

NOTE: This post is for educational purposes only. Please use the information responsibly and legally. The following you see is the HTTP Response header. HTTP/1.1 200 OK Date: Thu, 02 Oct 2025 18:30:00 GMT Server: nginx/1.24.0 Content-Type: text...
