Web Security 5
- Cookie Tampering: Plaintext, Hashed, and Base64 Cookies
- IDOR: Reading Other Customers' Data Through an Exposed API
- Cross-Site Scripting (XSS): Context, Filter Bypasses, and a Blind Cookie Steal
- SQL Injection: From Union Selects to Blind Time-Based Extraction
- Race Conditions: Spending Money You Don't Have with Burp Suite