Security
What is XSS? Cross-Site Scripting Attacks and Prevention
XSS (Cross-Site Scripting) is an OWASP A03:2021 vulnerability that lets attackers inject malicious scripts into web pages, stealing cookies, hijacking accounts, or redirecting users. Learn about 3 XSS types, example payloads, and prevention with CSP and HTML encoding.
What Is a WAF? Web Application Firewall Explained
A WAF (Web Application Firewall) provides Layer 7 protection against SQLi, XSS, LFI, and web application attacks. Learn how WAFs work, ModSecurity, AWS WAF, Cloudflare WAF, and deployment modes.
What is Ransomware? File Encryption Malware and Prevention
Ransomware is malware that encrypts files and demands a ransom payment to restore them. From WannaCry 2017 to LockBit 2023, ransomware costs billions annually. Learn the AES+RSA encryption mechanism, RaaS model, and 3-2-1 backup prevention strategy.
What is SQL Injection? Database Attacks and Prevention
SQL Injection (SQLi) is an OWASP A03:2021 vulnerability that lets attackers inject malicious SQL into application queries to access or delete entire databases. Learn the attack mechanism, example payloads, and prevention with Prepared Statements.
What is a Firewall? Role and Functions in Network Security
A firewall is a network security system that prevents unauthorized access and protects internal networks. Learn about firewall types, how they work, and how to enable/disable them on Windows.
What Is MFA? Multi-Factor Authentication vs 2FA Explained
MFA (Multi-Factor Authentication) uses multiple verification factors to protect accounts. Learn about the 3 factor categories, TOTP, FIDO2/WebAuthn, phishing-resistant MFA, and how to prevent MFA fatigue attacks.
What is VPN? Virtual Private Network, WireGuard and OpenVPN
VPN (Virtual Private Network) creates an encrypted tunnel between your device and the VPN server, protecting traffic and hiding your real IP address. Learn how WireGuard and OpenVPN work, and when to use VPN instead of a Proxy.
What Is Zero Trust? The 'Never Trust, Always Verify' Security Model
Zero Trust is a modern security model built on 'Never trust, always verify.' Learn about its core principles, architecture, Google BeyondCorp, Cloudflare Access, and how to adopt it step by step.
What is a Trojan? Essential Information About Trojan Malware
Learn what a Trojan is, how it works, common types (Backdoor, Rootkit, Banker, Downloader), signs of infection, and effective prevention measures.
What is OAuth 2.0? Authorization and Login with Google/GitHub
OAuth 2.0 is an open authorization protocol (RFC 6749) that lets third-party applications access user resources on another service without knowing their password. Learn the Authorization Code Flow, 4 roles, scopes, and how Google/GitHub login works under the hood.