Security-focused self-learning blog by allencharp.

Topics covered here:

• Web security: SSRF, CORS, OAuth, JWT, Log4J, TLS and more
• Pentesting tools: ZAP, wfuzz, Kali Linux, Raspberry Pi
• Security design: API security, supply chain, container signing and more

More about me: GitHub