Web Security

JavaScript CTF challenges are a great way to test your skills in web development and JavaScript. These challenges often involve decoding hidden messages or codes that are embedded in the page’s source code or HTML content. In this writeup, I will share my experience of solving a JavaScript CTF challenge…

If you have ever attempted to send a request from the client side, or if you have developed a backend application that provides authentication, you may have encountered at least one of these errors: Access to XMLHttpRequest at {URL} from origin {origin} has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’…

Challenge url : https://defendtheweb.net/playground/intro3 In this blog post, I will share my experience of solving a JavaScript CTF challenge that involved extracting a password from a web page. …

As a security operations centre (SOC) professional, preventing and stopping web attacks is one of the most significant challenges we face on a daily basis. In a previous article, I discussed the effectiveness of the OPNsense NGINX plugin while defending web servers against attacks. …

SQL Injection is a web hacking technique of inserting SQL commands in user-supplied data fields of web applications and submitting them for execution by the database server. To perform a SQL injection attack, an attacker inserts malicious SQL code, most often a database query, into a string that’s eventually executed…

Many developers love GraphQL because it uses a single endpoint and enables clients to customize their requests to obtain the data sets they want. However, when it comes to security, GraphQL’s flexibility can introduce specific security vulnerabilities that every developer needs to consider. When some of our developers began using…

The internet has revolutionized the way we communicate, work, and access information. However, while most of us are familiar with the surface web, which includes websites like Google, Facebook, and Amazon, there is another side to the internet that is not as well-known — the dark web. The dark web…

In modern web applications, it is very common to have user authentication and authorization systems. These systems provide user-specific functionality and data, which requires that each user has a certain level of access and control over the resources they own. However, when these resources are accessed in a rapid and…