Before going forward with session hijacking, let's deep dive into what a session is. A session is a unique token which establishes a...

Cookies are small files that websites store on a user's computer to remember certain information about that user. Cookies can have...

File inclusion is a type of vulnerability that can exist in web applications. It occurs when a web application allows a user to include a...

Cross site scripting (XSS) is an injection attack which is used to inject javascript code into input fields of a web application/ mobile...

CSRF or cross-site request forgery, also known as one click attack or session riding attack or XSRF. It is a web security vulnerability...

SQL injection (SQLi) is a web security vulnerability that allows an attacker to interfere with the queries that an application makes to...

To answer this, first let’s talk about HTTP Request methods. HTTP request methods specify the action that should be taken by the server...