摘要:
#JavaScript Attacks (前端攻击) The attacks in this section are designed to help you learn about how JavaScript is used in the browser and how it can be ma 阅读全文
摘要:
#Insecure CAPTCHA (不安全的验证流程) A CAPTCHA is a program that can tell whether its user is a human or a computer. You've probably seen them - colourful ima 阅读全文
摘要:
#CSP Bypass(CSP 绕过) Content Security Policy (CSP) is used to define where scripts and other resources can be loaded or executed from. This module will 阅读全文
摘要:
#Weak Session IDs (弱会话) Knowledge of a session ID is often the only thing required to access a site as a specific user after they have logged in, if t 阅读全文