Client-Side

5 notes

Clickjacking (UI Redressing)January 31, 2026Clickjacking / UI redressing, and how it differs from CSRF.
Cross-Origin Resource Sharing (CORS) – Detailed CheatJuly 10, 2025This markdown is designed to copy/paste directly. It uses clear, simple English and is very detailed so you can study or share easily.
CSRF Vulnerability ExplainedMay 1, 2025In simple terms: the attacker abuses the fact that the user is already logged in (has a valid session cookie) to perform actions on their behalf without their knowledge.
XSS Cookie Exfiltration GuideAugust 20, 2025XSS Cookie Exfiltration Guide · from Anas-Magane/Pentesting (TOP_10_OWASP / XSS).
اختبار أمان WebSockets من الصفرSeptember 8, 2025بالمقارنة مع HTTP العادي : - HTTP مبني على request/response . يعني: - client كيبعث request. - server كيرجع response. - الاتصال كيتسد بعد كل طلب.