Plain English explanations of how specific attack techniques work and what defenders can do about them.
Published entries in Hacking techniques explained:
- Active Directory Certificate Services (AD CS) abuse: how certificate misconfigurations lead to domain takeover
- How DNS spoofing works and how to stop it
- How subdomain takeover works and how to prevent it
- How SQL injection works: the mechanism, a UK fine and how to stop it
- How CSRF works: cross-site request forgery explained and how to prevent it
- How server-side request forgery (SSRF) works and how to stop it
- How cross-site scripting (XSS) works: the three types and how developers stop it
- How session hijacking works: stolen cookies, tokens and how to stop them
- How privilege escalation works: from ordinary account to administrator
- How XML external entity (XXE) attacks work and how to stop them
- How SAML authentication bypass works, and why MFA can be skipped