From Froga
Official curated learning paths
Official curated learning paths
Modern web uygulamalarını tehdit eden gerçek açıklar. Her teknoloji kimliğini nasıl ele verir, açık tam olarak neyi mümkün kılar ve nasıl kapatılır. Express, Next.js, Django ve Apache. Küçük bayraklar saklı.
Froga
Web güvenliğine yeni başlayanlar için kısa bir sözlük: CVE ve CVSS nedir, istek–yanıt nasıl çalışır, RCE ile kimlik doğrulama/yetkilendirme ne demek, ve sırada hangi lab ve odalar var. Yaklaşık on dakika.
Froga
The ideas the Web security 2 lab assumes: what a signed token is, how a database query is built from parts, why a server fetching a URL for you is different from you fetching it, and the theme under all of it — the server must not trust data just because it handled it. About ten minutes.
Froga
The ideas the Web security lab assumes: how a request and response work, what a URL’s parts are, what a cookie is, and the one that makes everything after it possible — the browser fills in the request, so the request is yours to change. About ten minutes.
Froga
The ideas the Digital Forensics lab assumes: what a file signature is, what base64 does, how metadata hides in plain sight, and what a log line actually says. Ten minutes.
Froga