Web & API Security
Most public attack surface is web applications and APIs. This hub covers common vulnerability classes such as injection and cross-site scripting, how they are tested for, and how developers prevent them.
- 40
- articles
- 8
- kinds of content
- Oct 2026
- newest article
- Who it is for
- Developers, testers and penetration testers focusing on applications.
- Prerequisites
- How HTTP works and basic web development knowledge.
Start here read in this order
Concepts explained 23
Showing the newest 8 of 23. The rest are in all articles.
Tutorials 8
Commands & reference 1
Labs & projects 3
Troubleshooting 1
Comparisons 1
Tools 1
Interview preparation 2
All Web & API Security articles 40, newest first
Hub structure updated 13 Nov 2026. Each article shows its own publication and update dates.