Tags
Browse the guides by subject, by the SDLC phase the work belongs to, and by the role they are written for. 69 tags, 6 phases and the program, and 4 roles.
SDLC phases
Roles
Weaknesses and attacks
- Access control 20
- Account takeover 9
- Browser security 9
- Business logic and race conditions 7
- Cross-site request forgery (CSRF) 2
- Cross-site scripting (XSS) 5
- Denial of service and resource limits 14
- Error handling and information disclosure 4
- File uploads and archives 5
- Injection 14
- Input validation and parsing 13
- Memory safety 7
- Multi-tenancy 4
- Proxies, caches and request smuggling 4
- Server-side request forgery (SSRF) 3
- Unsafe deserialization 3
Identity and cryptography
- Authentication and sessions 12
- Encryption 14
- Historical cryptographic attacks 11
- JSON Web Tokens (JWT) 3
- Key management 10
- MFA and passkeys 2
- OAuth and OpenID Connect 6
- Password storage 3
- PKI and certificates 9
- Post-quantum cryptography 3
- Privacy engineering 8
- SAML, SCIM and enterprise SSO 2
- Secrets management 20
- TLS 15
- Workload identity 9