Gabriel Odusanya·Sep 30How I Built a GitHub Actions Pipeline for OWASP A02 Security Misconfiguration1. Introduction
Gabriel Odusanya·Sep 25File Uploads Still Lead to RCE — What I Learned Breaking Avatar Upload on PortSwiggerFile upload looks harmless. “Just let users set a profile picture.” That one feature is still one of the most common ways a web app hands…
Jessica·Sep 16SQL Injection: A Beginner’s GuideSQL Injection sounded complicated to me when I first started learning web security. I didn’t understand why some random characters could…
Jessica·Sep 13Stored Cross-Site-Scripting(XSS): A Beginner’s GuideI want you to checkout my previous blog on XSS before jumping into Stored XSS. Do not miss out the links embedded within words!
