Web Security Basics
How the Web Works
Web Components
A browser requests content from a web server using web protocols. Many websites use forms, logins, cookies, and scripts to personalize content.
Common Web Risks
Common issues include weak authentication, insecure input handling, exposed data, and poor session management.
Beginner Web Security Terms
Security Reminder
Never test a live website beyond what has been authorized and documented.
What is input validation?
Input validation helps prevent harmful or unexpected data from being processed.
Correct answer: Checking whether data is acceptable before using it
What is the difference between authentication and authorization?
These are related but distinct security checks.
Correct answer: Authentication proves who you are; authorization determines what you can do.
Which item is commonly stored by a browser to help websites remember state?
Cookies are commonly used to store small bits of session-related data.
Correct answer: Cookie
Safe Web Testing Mindset
-
1
Step 1: Identify the exact site and scope.
-
2
Step 2: Learn the application's purpose and features.
-
3
Step 3: Look for obvious security weaknesses in a controlled way.
-
4
Step 4: Record evidence carefully.
-
5
Step 5: Report only through approved channels.