RU
EN
☀
☾
← Home
Series
$
ls
-l
~/series
total 4
drwxr-xr-x
jwt/
JWT Security
18 articles
03.04.2026
ongoing
#
Complete guide to attacking JSON Web Tokens — from basic anatomy to post-quantum cryptography. 20 articles with real CVEs, PoCs and pentest techniques.
drwxr-xr-x
web-servers/
Web Servers
2 of 20
24.10.2026
ongoing
#
Attacking web servers — from misconfiguration to RCE. Nginx, Apache, Node.js, reverse proxies and everything between the client and backend.
drwxr-xr-x
idor/
IDOR and BOLA
0 of 20
—
in preparation
#
Finding IDOR, BOLA and other access control flaws through black-box testing.
drwxr-xr-x
sqli/
SQL injection
0 articles
—
in preparation
#
How SQL injection works and how to find it when testing web applications.