Top Ten Web Application Vulnerabilities

OWASP's Top Ten Most Critical Web Application Vulnerabilities

  1. Unvalidated Input
  2. Broken Access Control
  3. Broken Authentication and Session Management
  4. Cross Site Scripting (XSS) Flaws
  5. Buffer Overflows
  6. Injection Flaws
  7. Improper Error Handling
  8. Insecure Storage
  9. Denial of Service
  10. Insecure Configuration Management

Comments

Post a Comment

Popular posts from this blog

2 ways to copy tooltip text from a web page

Image
There are times when I've wanted the tool-tip text that appears on hovering over a link or an icon within a web page. The cumbersome way is to select the object that has the tooltip and then use Inspect element option in Chrome (as shown in the animated GIF below) or open Developer Tools (F12 keyboard shortcut in popular browsers) select the element containing the tooltip and grab the desired text from HTML code. Inspect Element option in Chrome I found a simpler option that works with tool-tips on some websites (not all) Select the word before and after the image containing the tooltip and when the tool tip appears, copy the selected text. Copy it from the clipboard and remove the extra words after you paste Select tooltip & its surrounding words, copy & paste I've tested this crude trick in IE 11, Firefox 34 and Chrome 39 (all on Windows) (The animated GIFs were generated using the ScreenToGif open-source tool)
Read more

This Week I Learned - Week 27 2026

Image
This Week I Learned -  *  Intensive Vibe Coding Course With Google - self-paced Kaggle Learn guide * Forward Deployed Engineers (FDEs) bridge internal development and real-world deployment by embedding with enterprise clients to build solutions while guiding the product roadmap.  FDEs are the "Technical Special Ops" who bridge the gap (The Delta) between a core product and a client’s messy, real-world reality. * Google DeepMind CEO Demis Hassabis and researcher John Jumper won the Nobel Prize in chemistry for their work on the company’s AlphaFold model, and DeepMind has also made major contributions to meteorology, materials science, and a variety of other disciplines. John Jumper is leaving DeepMind for Anthropic.  * Like Claude Code, Claude Science can autonomously carry out meaningful work when given concise, high-level instructions, and it has access to tools that make it particularly useful for research in computational biology and drug development. C...
Read more

HOW TO download files hosted in Azure Web App in bulk

Image
Here are the steps to download all the site files hosted in an Azure Web App service in bulk for local modifications or cloning to another hosting location - 1. Log in to the Azure portal 2. Navigate to your App Service 3. Go to the "Advanced Tools" section  4. Click on "Go" link to launch the Kudu console  5. In the Kudu console, navigate to the "Debug console" and then select "CMD" Once you are in the command prompt, navigate to the "Site" directory and then to the "wwwroot" directory. Your Web App should be located in a subdirectory of "wwwroot" 6. Click on the Download icon on the left of the label "wwwroot" to download all the files in the Web App as a zipped file. Alternatively, if your web app URL is https:// <yourappname> .azurewebsites.net/ insert the word scm after the subdomain name thus - https:// <yourappname> . scm .azurewebsites.net/ This will lead you directly to the Kudu con...
Read more