RatSec

RatSec Blog

Nikto - An overview

- Posted in tools by

Nitko Scanner Nikto is an open-source web server scanner that helps security professionals and administrators identify potential vulnerabilities and security issues in web servers and web

Authorisation vs Authentication: Explained

- Posted in Business logic by

Authentication: Authentication is the process of verifying the identity of a user, system, or device. In cybersecurity, authentication is a critical step in ensuring that only authorized individuals

API Secure Coding Patterns: Best Practices for Robust and Secure APIs

- Posted in API by

Introduction Application Programming Interfaces (APIs) have become an integral part of modern software development. They enable communication between different software components, simplify the

CWEs every pentester should know

- Posted in CWE by

50 CWE's every ethical hacker should know, which ones did I miss? Add your own in the comments! https://thexssrat.podia.com/ethical-hacking-guide-a-z?coupon=90OFF CWE -20: Improper Input

Uncle Rat's XSS Content

- Posted in XSS by

Written https://labs.hackxpert.com/blog/XSS/ https://labs.hackxpert.com/blog/XSS/XSS%200ad0878f33094ea6b8ac90e94c2b0dc2/XSS%20Cheat%20sheet%205c643ce56d1e4ed9871fdd909ded017e.html

Ensuring Application Security through State Management, Race Condition Mitigation, and Secure Transactions

- Posted in Business logic by

Introduction Ensuring the security and integrity of modern applications requires a multi-faceted approach. In addition to securing data and enforcing access controls, developers must also focus on