Password Hashing Cost as Brute Force Mitigation

Double-Submit Cookie Pattern

SameSite Cookie Attribute Defense

User Enumeration via Login Responses

Timing Attacks and Constant-Time Comparison

HTTPS/TLS as Defense Against Sniffing and MITM

Phishing Attacks Against Credentials

Man-in-the-Middle (MITM) Attack Fundamentals

SQL Injection Attack and Defenses

Replay Attacks and Nonce/Timestamp Defenses

Open Redirect Vulnerabilities

Dictionary and Credential Stuffing Attacks

How CSRF Attacks Work

CSRF Token Defense

What Is CSRF

XSS Leading to Session Hijacking

Exponential Backoff / Login Throttling

CAPTCHA as Automated Attack Defense

Clickjacking and Frame Protections

What is a Brute Force Attack

Rate Limiting as Brute Force Defense

Content Security Policy as XSS Defense

Session Hijacking via Network Sniffing

Account Lockout Policies

SameSite Cookie Attribute

Stored XSS

Reflected XSS

CSRF Tokens

How CSRF Works

DOM-Based XSS

Output Encoding

Double-Submit Cookie Pattern

What is XSS

Origin/Referer Header Checks

Input Validation and Sanitization

What is CSRF