Knowledge Base
Learn offensive security, the practical way.
Reference, research, learning paths, and checklists - everything in one place.
Learning paths
Web app pentest starter
API security essentials
Server-side deep dive
Secure-coding checklist
▸ Enforce per-object authorization on every request (stop IDOR/BOLA).
▸ Parameterize all database queries; never string-build SQL.
▸ Validate redirect & fetch destinations against an allowlist (open redirect, SSRF).
▸ Set a strict CSP with nonces; drop unsafe-inline/unsafe-eval.
▸ Pin JWT algorithms and verify signature, iss, aud, and exp.
▸ Rate-limit auth and password-reset flows; enforce MFA.
Glossary
OAST
Out-of-band Application Security Testing - using DNS/HTTP callbacks to confirm blind vulnerabilities.
ReAct loop
Reason → Act → Observe cycle the agent uses to choose tools and chase leads.
Validation gate
An AI step that reclassifies severity and filters false positives before reporting.
BOLA
Broken Object Level Authorization - the API form of IDOR and the #1 API risk.