SecurityZines.com Join

Security Zines

Security concepts, hand-drawn on one page each. JWT, CORS, OAuth, XSS and 65+ more, free to read.

Drawn by Rohit (@who_rsehgal) and Anshu (@thebitdoodler).

Rohit moved on X: @sec_r0 is now @who_rsehgal

Shop the zines Browse all posters
MCP RCE: hand-drawn explainer poster

MCP RCE

DevSecOpsFlyer PR Hijack: hand-drawn explainer poster

PR Hijack

DevSecOpsFlyer Cookies & Sessions: hand-drawn explainer poster

Cookies & Sessions

Web SecuritySketchnote OAuth 2.0: hand-drawn explainer poster

OAuth 2.0

Identity & AuthSketchnote

Web Security

how browsers and web apps get attacked, and the controls that stop it

All 35
Cookies & Sessions: hand-drawn explainer poster

Cookies & Sessions

Web SecuritySketchnote Session Identifiers: hand-drawn explainer poster

Session Identifiers

Web SecuritySketchnote XSS: hand-drawn explainer poster

XSS

Web SecuritySketchnote Burp Suite: hand-drawn explainer poster

Burp Suite

Web SecurityFlyer

Identity & Auth

tokens, sessions, logins and who is allowed to do what

All 7
JSON Web Tokens: hand-drawn explainer poster

JSON Web Tokens

Identity & AuthSketchnote OAuth 2.0 Flows: hand-drawn explainer poster

OAuth 2.0 Flows

Identity & AuthSketchnote OAuth 2.0: hand-drawn explainer poster

OAuth 2.0

Identity & AuthSketchnote Single Sign-On: hand-drawn explainer poster

Single Sign-On

Identity & AuthSketchnote

Networking

how packets, mail and domains actually travel

All 8
How HTTPS Works: hand-drawn explainer poster

How HTTPS Works

NetworkingSketchnote Networking Models: hand-drawn explainer poster

Networking Models

NetworkingSketchnote Network Attacks: hand-drawn explainer poster

Network Attacks

NetworkingFlyer OSI vs. TCP/IP Network Models: hand-drawn explainer poster

OSI vs. TCP/IP Network Models

NetworkingFlyer

Cloud & Containers

Docker, Kubernetes, infrastructure and data at scale

All 8
DB Sharding: hand-drawn explainer poster

DB Sharding

Cloud & ContainersSketchnote DB Types: hand-drawn explainer poster

DB Types

Cloud & ContainersSketchnote Docker & Internals: hand-drawn explainer poster

Docker & Internals

Cloud & ContainersSketchnote Kubernetes Architecture: hand-drawn explainer poster

Kubernetes Architecture

Cloud & ContainersSketchnote

DevSecOps

pipelines, secrets, tooling and thinking like an attacker

All 9
CI/CD Pipelines: hand-drawn explainer poster

CI/CD Pipelines

DevSecOpsSketchnote Git vs GitHub: hand-drawn explainer poster

Git vs GitHub

DevSecOpsSketchnote PR Hijack: hand-drawn explainer poster

PR Hijack

DevSecOpsFlyer Canary Tokens: hand-drawn explainer poster

Canary Tokens

DevSecOpsFlyer

Linux Internals

what lives under /dev and /proc

All 4
Linux /dev Directory: hand-drawn explainer poster

Linux /dev Directory

Linux InternalsFlyer Linux /proc Filesystem: hand-drawn explainer poster

Linux /proc Filesystem

Linux InternalsFlyer Linux /dev Directory: hand-drawn explainer poster

Linux /dev Directory

Linux InternalsPrintie Linux /proc Filesystem: hand-drawn explainer poster

Linux /proc Filesystem

Linux InternalsPrintie

The zines

Multi-page deep dives you keep. Buy one, or get them all with the membership.

CSRF: hand-drawn explainer poster

CSRF

CSRF

Cross-Site Request Forgery (CSRF / XSRF) end to end: how a forged request rides your session, and how to stop it.

Free Get it free
HTTP: hand-drawn explainer poster

HTTP

HTTP

HTTP explained for security: the request, the response, status codes, and HTTP/1.1 to HTTP/3 over TLS.

Free Get it free
SAML: hand-drawn explainer poster

SAML

SAML

SAML 2.0 single sign-on explained: the signed assertion, the login flow, and how it breaks.

Free Get it free
XSS: hand-drawn explainer poster

XSS

XSS

Cross-Site Scripting (XSS): reflected, stored and DOM-based, and why it's far more than alert(1).

Free Get it free

Also in the shop

All flyers in HD (PDF)$15 Burp Suite Plugin Development Guide$10 WebAuth Zine$2

Get the next one by email

New posters land in the Security Zines newsletter on Substack. Free, no spam.