36 items
Password Hashing Cost as Brute Force Mitigation
FlashcardDouble-Submit Cookie Pattern
QuizSameSite Cookie Attribute Defense
QuizHTTPS/TLS as Defense Against Sniffing and MITM
FlashcardUser Enumeration via Login Responses
FlashcardTiming Attacks and Constant-Time Comparison
FlashcardPhishing Attacks Against Credentials
FlashcardMan-in-the-Middle (MITM) Attack Fundamentals
FlashcardSQL Injection Attack and Defenses
FlashcardReplay Attacks and Nonce/Timestamp Defenses
FlashcardOpen Redirect Vulnerabilities
FlashcardDictionary and Credential Stuffing Attacks
FlashcardCSRF Token Defense
QuizHow CSRF Attacks Work
QuizWhat Is CSRF
QuizExponential Backoff / Login Throttling
FlashcardRate Limiting as Brute Force Defense
FlashcardWhat is a Brute Force Attack
FlashcardSession Hijacking via Network Sniffing
FlashcardXSS Leading to Session Hijacking
FlashcardAccount Lockout Policies
FlashcardClickjacking and Frame Protections
FlashcardCAPTCHA as Automated Attack Defense
FlashcardContent Security Policy as XSS Defense
FlashcardSameSite Cookie Attribute
FlashcardStored XSS
FlashcardWhat is XSS
FlashcardOutput Encoding
FlashcardReflected XSS
FlashcardCSRF Tokens
FlashcardHow CSRF Works
FlashcardDOM-Based XSS
FlashcardDouble-Submit Cookie Pattern
FlashcardOrigin/Referer Header Checks
FlashcardInput Validation and Sanitization
FlashcardWhat is CSRF
FlashcardHow CSRF Works
A malicious page silently submits a request using the victim's existing session cookies.
How does a CSRF attack typically work?