OWASPTop10

SQL Injection

SQL Injection is a web security vulnerability where an attacker inserts malicious SQL statements into an application's input fields, tricking the backend datab…

XSS

Cross-Site Scripting (XSS) is a web security vulnerability that lets an attacker inject malicious client-side scripts into pages viewed by other users. When un…

OWASP ZAP

OWASP ZAP (Zed Attack Proxy) is a free, open-source dynamic application security testing (DAST) tool maintained by the OWASP Foundation, used to find security…

Web Application Firewall (WAF)

A Web Application Firewall (WAF) is a security control that filters, monitors, and blocks HTTP/HTTPS traffic to and from a web application, protecting it from…

Bug Bounty Program

A bug bounty program is an initiative where an organization invites independent security researchers to find and responsibly report vulnerabilities in its syst…

Vulnerability Assessment

A vulnerability assessment is a systematic process of identifying, classifying, and prioritizing security weaknesses in systems, networks, or applications, typ…

Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS) is a web security vulnerability that lets an attacker inject malicious JavaScript into a page viewed by other users, allowing them t…

Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) is an attack that tricks an authenticated user's browser into unknowingly submitting a malicious request to a web application…

CVE (Common Vulnerabilities and Exposures)

CVE (Common Vulnerabilities and Exposures) is a publicly maintained catalog that assigns a unique, standardized identifier to each publicly disclosed cybersecu…

OWASP Top 10

The OWASP Top 10 is a regularly updated awareness document published by the Open Worldwide Application Security Project that ranks the ten most critical securi…