Security Notes

Self-learning notes on web security, pentesting tools and networking — by allencharp.

Web Security

AWS IMDSv1 SSRF 8 August 2026 · web-security · cloud-security · aws · ssrf
OAuth 23 January 2022 · web-security · oauth · authentication
Log4J Remote Code Execution 10 December 2021 · web-security · log4j · rce
Cookie SameSite Attribute 17 November 2020 · web-security · cookies · samesite
Server Side Request Forgery 18 January 2020 · web-security · ssrf · pentest
ASP.NET Security Feature 22 December 2019 · web-security · aspnet · hardening
CORS Header Misconfiguration 22 September 2019 · web-security · cors · misconfiguration
Json Web Tokens 30 September 2018 · web-security · jwt · authentication

Securing Nexus Against Third-Party Supply Chain Poisoning 9 August 2026 · supply-chain-security · nexus · devsecops · repository
Raspberry and Kali Linux 4 July 2019 · kali · raspberry-pi · pentest
wfuzz and some bugs 15 January 2019 · pentest · wfuzz · fuzzing
ZAP and ZAPv2 Python Library 30 August 2018 · pentest · zap · python