Password Hashing Cost as Brute Force Mitigation

SameSite Cookie Attribute Defense

Double-Submit Cookie Pattern

Dictionary and Credential Stuffing Attacks

User Enumeration via Login Responses

Timing Attacks and Constant-Time Comparison

Phishing Attacks Against Credentials

Man-in-the-Middle (MITM) Attack Fundamentals

SQL Injection Attack and Defenses

Replay Attacks and Nonce/Timestamp Defenses

Open Redirect Vulnerabilities

HTTPS/TLS as Defense Against Sniffing and MITM

What Is CSRF

CSRF Token Defense

How CSRF Attacks Work

XSS Leading to Session Hijacking

Session Hijacking via Network Sniffing

CAPTCHA as Automated Attack Defense

What is a Brute Force Attack

Content Security Policy as XSS Defense

Account Lockout Policies

Exponential Backoff / Login Throttling

Clickjacking and Frame Protections

Rate Limiting as Brute Force Defense

Stored XSS

What is XSS

Output Encoding

SameSite Cookie Attribute

Reflected XSS

CSRF Tokens

How CSRF Works

DOM-Based XSS

Double-Submit Cookie Pattern

Origin/Referer Header Checks

Input Validation and Sanitization

What is CSRF