Password Hashing Cost as Brute Force Mitigation

Double-Submit Cookie Pattern

SameSite Cookie Attribute Defense

HTTPS/TLS as Defense Against Sniffing and MITM

User Enumeration via Login Responses

Timing Attacks and Constant-Time Comparison

Phishing Attacks Against Credentials

Man-in-the-Middle (MITM) Attack Fundamentals

SQL Injection Attack and Defenses

Replay Attacks and Nonce/Timestamp Defenses

Open Redirect Vulnerabilities

Dictionary and Credential Stuffing Attacks

CSRF Token Defense

How CSRF Attacks Work

What Is CSRF

Exponential Backoff / Login Throttling

Rate Limiting as Brute Force Defense

What is a Brute Force Attack

Session Hijacking via Network Sniffing

XSS Leading to Session Hijacking

Account Lockout Policies

Clickjacking and Frame Protections

CAPTCHA as Automated Attack Defense

Content Security Policy as XSS Defense

SameSite Cookie Attribute

Stored XSS

What is XSS

Output Encoding

Reflected XSS

CSRF Tokens

How CSRF Works

DOM-Based XSS

Double-Submit Cookie Pattern

Origin/Referer Header Checks

Input Validation and Sanitization

What is CSRF