☁️
14 threads
Cloud & Infrastructure Security
Cloud posture management, container security, zero-trust architectures, and network boundaries.
Topic · Cybersecurity
Cybersecurity.
From theory to practice.
Information security architecture, defense-in-depth, threat intelligence, and vulnerability management.
83
Learners
136
Proofs shipped
1
Organizations
9
Problems solved
Subtopics Library
Subtopics in Cybersecurity
🛡️
18 threads
Ethical Hacking & Penetration Testing
Offensive security testing, red teaming, exploit analysis, and vulnerability reporting.
Topic Feed · Cybersecurity
Latest Threads (Newest First)
G
Thread
Web App Security & OWASP Top 10
2 weeks ago
How do you remediate Stored Cross-Site Scripting (XSS) and Broken Object Level Authorization (BOLA)?
Encode output, enforce CSP, and add server‑side object checks to eliminate stored XSS and BOLA.
Gaurav Bhasin
Score 24
0 replies →
A
Thread
Web App Security & OWASP Top 10
2 weeks ago
How to prevent SQL Injection (SQLi) vulnerabilities completely in modern web frameworks?
Prevent SQLi by exclusively using prepared statements/ORM bindings, strict validation, and CSP; never concatenate user input into SQL.
Aravind Patel
Score 20
0 replies →
R
Thread
Web App Security & OWASP Top 10
2 weeks ago
What is Cross-Site Request Forgery (CSRF) and how do anti-CSRF tokens protect state-changing POST requests?
Anti‑CSRF tokens tie each state‑changing request to a server‑generated secret, preventing forged submissions.
Rahul Sharma
Score 20
0 replies →
I
Thread
Web App Security & OWASP Top 10
2 weeks ago
How to fix Server-Side Request Forgery (SSRF) vulnerabilities in web applications processing remote URLs?
Validate and whitelist URLs, enforce network egress rules, and isolate fetches to prevent SSRF.
Ishaan Patel
Score 20
0 replies →
R
Thread
Web App Security & OWASP Top 10
2 weeks ago
What are the best practices for secure password hashing and session cookie storage?
Use Argon2id (or bcrypt $2b$) with proper parameters and set Secure, HttpOnly, SameSite=Strict cookies with short lifetimes.
Rajesh Sharma
Score 20
0 replies →
G
Thread
Web App Security & OWASP Top 10
2 weeks ago
How to conduct automated DAST scans using OWASP ZAP in CI/CD pipeline tests?
Integrate ZAP Docker in CI, run baseline and full scans with risk thresholds, and abort builds on high‑risk alerts.
Gaurav Bhasin
Score 24
0 replies →