Web security

2026

• What Is XSS? The Basics and a Hands-On DVWA Demo

  #webA flaw that comes from a site printing user input to the page without checking it; the attacker's code runs in someone else's browser.

  Jul 19
• What Is Host Header Injection? Detection to Exploitation with Burp

  #webThe Host header is entirely under the user's control; when some applications trust it too much, the password reset link goes to the attacker's server.

  Jun 4
• From Browser to Terminal: Taking Over a Server with Command Injection

  #webCommand injection means that when a web application adds user input to an operating system command without filtering it, you can write shell commands there.

  Apr 25
• SQL Injection with SQLmap on Kali: From Login Form to Database

  #web#toolsSQLmap is an open-source tool that automates SQL injection testing; it handles what you'd do manually with a few commands.

  Apr 18