Web Application Security
Everything you need to understand web application vulnerabilities — from injection attacks and cross-site scripting to broken access control and business logic flaws.
18 articles10 cases56 terms
Explore topic
Topics
Security Topics
Explore our content organized by security domain. Each topic aggregates knowledge articles, case studies, and glossary terms into a single reference hub.
How these hubs are organized
Each topic hub aggregates three kinds of material from across the site: knowledge articles that explain a vulnerability class in depth, case studies that show how the class plays out in a real engagement, and glossary entries that pin down the terminology. Tags are the connective tissue — an article about JWT confusion lands under API Security because the mechanism lives at the token layer, while a stored-XSS writeup lands under Web Application Security because the payload is.
If you are scoping an assessment, the hubs are a fast way to check coverage: the case studies under a topic show which attack classes we have actually exploited, and the glossary depth shows how much reference material exists to back the findings in a report. If you are learning, start with the knowledge articles — they are written to be read cold — then use the case studies to see the same class against a live target.
The three hubs map to where most application risk concentrates: the rendered web surface, the API surface behind it, and the infrastructure both run on. A serious review touches all three, because the worst findings usually live at the seams between them.