Web-security, best practices and pentest

List of best practices and pentest tools to prevent/attack common and complex vulnerability on web component (API, Oauth, JWT, ...).

Best practices to audit and configure web app again CSRF, XSS and XSF attacks

Useful links : XSS attacks What is cross-site scripting (XSS) and how to prevent it? | Web Secu...

Definition SRF (Cross-Site Request Forgery) attacks involve tricking authenticated users into un...

Definition XSS (Cross-Site Scripting) attacks are security vulnerabilities in web applications w...

Best practices to audit and use JWT

JWT is safe. JWT misconfiguration is widespread and involves huge security breaches Ressources...

List of useful pentest tools

List of tools used to pentest web app Safety Python dependencies check CorsTest Simple CORS m...