#SQL Injection

From injection and broken auth to XSS and the newest threats — OWASP Top 10 broken down with real code examples and practical mitigations for each vulnerability.

3 days after launch, our DB CPU spiked to 100%. Logs showed a SQL Injection attack. This is a war story of how we urgently deployed AWS WAF to block the attack. I also explain Positive vs Negative Security Models and the OWASP Core Rule Set (CRS).

I share how I hacked my friend's website with a single line of SQL Injection in high school. I explain the OWASP Top 10 vulnerabilities every developer must know allowing you to 'think like a hacker'. I focus on Injection, Broken Access Control (IDOR), Cryptographic Failures, and Security Misconfiguration.