Freaks City

Client-Side vs. Server-Side Storage Evolution Early web architecture were stateless, serving identical content to all visitors. As e-commerce and social platforms emerged, user state became critical. Initial solutions utilized cookies, storing key-value pairs locally on the client browser. While simple, cookies are vulnerable to interception an ...

As mentioned in the first chapter, AJAX is a combination technology primarily including JavaScript, XML, and web services that enable asynchronous HTTP communication between client and server. Crawling AJAX Applications In AJAX-based applications, the links that crawlers can identify depend on the application's logical flow. In this section, we ...

Users may experience abrupt session terminations and forced logouts during system operations, often due to expired authentication tokens. This issue persists even when Redis caches user IDs and token data. The core problem lies in token expiration invalidating user identity. Automatic token refresh mechanisms provide solutions by generating new ...

Cross-Site Scripting (XSS) Core Mechanism XSS vulnerabilities occur when applications trust user-submitted data without proper sanitization. The server processes user input, converts it to HTML elements, and delivers it to clients where malicious scripts execute. Characteristics Stealthy execution with no visible interface Theft of sensitive u ...

Authentication Vulnerabilities Exploiting Weak Credentials The first challenge involves bypassing authentication through brute force techniques. The objective is to identify valid credentials by testing common passwords against a target login interface. To execute this attack, an interception proxy like Burp Suite is essential. Capture the init ...

JSON Web Tokens consist of three distinct segments: a header defining cryptographic parameters, a payload carrying assertions, and a signature ensuring integrity. Implementing token validation in a Spring ecosystem requires orchestrating token generation, externalized configuration, request interception, and MVC registration. The following guid ...

Algorithm Comparison SHA-256 AES Hash Algorithm Symmetric Encryption Irreversible Reversible No Key Storage Required Requires Key Storage When securing passwords, hash functions are typically preferred over symmetric encryption algorithms. Hash algorithms like SHA-256 are more commonly recommended for password protection due to th ...

Understanding SSRF Attacks Server-Side Request Forgery (SSRF) occurs when a application allows users to supply URLs or IP addresses that the server will then request data from. This vulnerability arises primarily when web applications provide functionality to fetch resources from external sources without properly validating or sanitizing the ta ...

The src attribute of an <img> tag can reference local files, inline base64 data, or execute asynchronous HTTP GET requests when pointing to a backend route. Routing this endpoint to return binary image data allows seamless integration with template rendering. To avoid filesystem overhead, generating verification images entirely in memory ...

Overview File upload vulnerabilities arise when web applications inadequately validate or sanitize user-supplied files before storing and serving them. Exploiting these flaws allows attackers to inject executable code—such as PHP webshells—into the server’s filesystem, often leading to remote code execution. Upload-Labs is a deliberately vulner ...