Tag

#websecurity

409 posts35 followers

Explore Hashnode

Alternatives

Sina Rezaei1d ago · 3 min read

Your AI Pentester Found an SSRF. Can It Reproduce the Attack?

The first scan found an SSRF. The second one didn't. I wouldn't close the finding just yet. The endpoint accepts a URL, fetches the resource, and returns its response. During the first scan, the agent

sinarezaei.hashnode.dev

ZyVOP4d ago · 11 min read

SSL, TLS, and HTTPS Explained: What the Padlock Actually Means

Every time you log into your bank, buy something online, or even just read a blog post, a small padlock icon (or a similar connection icon, depending on the browser) sits next to the address bar. Most

blog.zyvop.com

viditOct 21 · 8 min read

The eMudhra Certificate Compromise: The Internet Trusted a Private Key That Was Literally the Number 4

Eight intermediate CA keys. A key-generation failure. And a reminder that strong cryptography means nothing if the secret is predictable. That is not a test fixture from a cryptography tutorial. That

viditp.hashnode.dev

Deep PatelOct 19 · 4 min read

How I Deployed a Laravel + React Application to Production on AWS

Getting an application “working on my machine” is one milestone. Getting it safely into production is a different job. This summer, I took on a project where a development team had finished their Lara

2 pdeep1506.hashnode.dev

Doogal SimpsonOct 10 · 5 min read

Preventing Timing Attacks with Constant-Time Comparisons

TL;DR: Using standard comparison operators like == to validate API keys or cryptographic signatures leaks secrets byte-by-byte. Because standard operators return early upon encountering a mismatch, at

doogal.dev

Doogal SimpsonOct 5 · 5 min read

How Java HashMap Prevents Hash Collision DoS Attacks

Java's HashMap mitigates Hash Collision Denial of Service (DoS) attacks by automatically converting congested linked list buckets into Red-Black trees once a bucket exceeds 8 entries and the total map

doogal.dev

Lewis GilchristOct 1 · 7 min read

The bot problem that CAPTCHA can't solve, and proof of human can

reCAPTCHA and proof of human are both described as ways to keep bots out. They are solving different problems. That sounds like a minor distinction. It is not. The problem reCAPTCHA cannot solve is th

devabkk.hashnode.dev

JebitokSep 22 · 20 min read

HTTP Request Smuggling (TryHackMe)

Link to the challenge on TryHackMe: HTTP Request Smuggling Introduction Introduction HTTP Request Smuggling is a vulnerability that arises when there are mismatches in different web infrastructure com

sharonjebitok.com

Jayesh SojitraSep 19 · 4 min read

5 Frontend Security Mistakes That Are Easy to Miss

Frontend security doesn't get the same review scrutiny backend security does, partly because the consequences aren't always obvious immediately. Here are five mistakes that show up constantly, and why

jayesh-sojitra.hashnode.dev

Megha VarshiniSep 14 · 3 min read

HTTP vs HTTPS: What’s the Difference?

Introduction Whenever we visit a website, our browser needs a way to communicate with the website's server. This communication happens using certain protocols, and two of the most common ones are HTTP

megha-blogs.hashnode.dev

Search Hashnode