Server-Side Request Forgery (or SSRF) is an attack that consists of inducing a web application to send […]

Host Header injection is not the type of attack that you would normally find in CTFs or […]

HTTP Request Smuggling (HRS) is a type of attack that is gaining more and more attention in […]

Out of the many attacks that threaten web applications today, XXE remains the one that is talked […]

Cross-Site Request Forgery (CSRF or XSRF), also called Client-Side Request Forgery, is a type of attack that […]

This article presents a great introduction for anyone trying to learn about Cross-Site Scripting (or XSS). You […]

THC Hydra is a powerful tool to use against login forms. It can perform brute force and […]

Directories and Files enumeration is one of the first steps that an attacker performs during web application […]

SQL injection is often referenced as the most common type of attack on websites. It is being […]