Skip to content

SecurityZines.com Join

Security Zines

Security concepts, hand-drawn on one page each. JWT, CORS, OAuth, XSS and 65+ more, free to read.

Drawn by Rohit (@who_rsehgal) and Anshu (@thebitdoodler).

Rohit moved on X: ~~@sec_r0~~ is now @who_rsehgal

Shop the zines Browse all posters

Cookies & Sessions: hand-drawn explainer poster

Cookies & Sessions

Web SecuritySketchnote

OAuth 2.0: hand-drawn explainer poster

OAuth 2.0

Identity & AuthSketchnote

DB Sharding: hand-drawn explainer poster

DB Sharding

Cloud & ContainersSketchnote

JSON Web Tokens: hand-drawn explainer poster

JSON Web Tokens

Identity & AuthSketchnote

Web Security

how browsers and web apps get attacked, and the controls that stop it

All 35

Cookies & Sessions: hand-drawn explainer poster

Cookies & Sessions

Web SecuritySketchnote

Session Identifiers: hand-drawn explainer poster

Session Identifiers

Web SecuritySketchnote

XSS: hand-drawn explainer poster

XSS

Web SecuritySketchnote

Burp Suite: hand-drawn explainer poster

Burp Suite

Web SecurityFlyer

Identity & Auth

tokens, sessions, logins and who is allowed to do what

All 7

JSON Web Tokens: hand-drawn explainer poster

JSON Web Tokens

Identity & AuthSketchnote

OAuth 2.0 Flows: hand-drawn explainer poster

OAuth 2.0 Flows

Identity & AuthSketchnote

OAuth 2.0: hand-drawn explainer poster

OAuth 2.0

Identity & AuthSketchnote

Single Sign-On: hand-drawn explainer poster

Single Sign-On

Identity & AuthSketchnote

Networking

how packets, mail and domains actually travel

All 8

How HTTPS Works: hand-drawn explainer poster

How HTTPS Works

NetworkingSketchnote

Networking Models: hand-drawn explainer poster

Networking Models

NetworkingSketchnote

Network Attacks: hand-drawn explainer poster

Network Attacks

NetworkingFlyer

OSI vs. TCP/IP Network Models: hand-drawn explainer poster

OSI vs. TCP/IP Network Models

NetworkingFlyer

Cloud & Containers

Docker, Kubernetes, infrastructure and data at scale

All 8

DB Sharding: hand-drawn explainer poster

DB Sharding

Cloud & ContainersSketchnote

DB Types: hand-drawn explainer poster

DB Types

Cloud & ContainersSketchnote

Docker & Internals: hand-drawn explainer poster

Docker & Internals

Cloud & ContainersSketchnote

Kubernetes Architecture: hand-drawn explainer poster

Kubernetes Architecture

Cloud & ContainersSketchnote

DevSecOps

pipelines, secrets, tooling and thinking like an attacker

All 7

CI/CD Pipelines: hand-drawn explainer poster

CI/CD Pipelines

DevSecOpsSketchnote

Git vs GitHub: hand-drawn explainer poster

Git vs GitHub

DevSecOpsSketchnote

Canary Tokens: hand-drawn explainer poster

Canary Tokens

Canary Tokens: hand-drawn explainer poster

Canary Tokens

DevSecOpsPrintie

Linux Internals

what lives under /dev and /proc

All 4

Linux /dev Directory: hand-drawn explainer poster

Linux /dev Directory

Linux InternalsFlyer

Linux /proc Filesystem: hand-drawn explainer poster

Linux /proc Filesystem

Linux InternalsFlyer

Linux /dev Directory: hand-drawn explainer poster

Linux /dev Directory

Linux InternalsPrintie

Linux /proc Filesystem: hand-drawn explainer poster

Linux /proc Filesystem

Linux InternalsPrintie

The zines

Multi-page deep dives you keep. Buy one, or get them all with the membership.

Threat Modelling: hand-drawn explainer poster

Threat Modelling

Threat Modelling

The basics of a threat model, with fun.

$2+ Buy the zine

Phishing: hand-drawn explainer poster

Phishing

Phishing

The most notorious security issue, and how the bait works.

$5+ Buy the zine

Docker & Containers: hand-drawn explainer poster

Docker & Containers

Docker & Containers

The stack behind modern application runtimes.

$6 Buy the zine

Same Origin Policy: hand-drawn explainer poster

Same Origin Policy

Same Origin Policy

How the Same Origin Policy (SOP) protects the browser, origin by origin.

$4 Buy the zine

CSRF: hand-drawn explainer poster

CSRF

CSRF

Cross-Site Request Forgery (CSRF / XSRF) end to end: how a forged request rides your session, and how to stop it.

Free Get it free

HTTP: hand-drawn explainer poster

HTTP

HTTP

HTTP explained for security: the request, the response, status codes, and HTTP/1.1 to HTTP/3 over TLS.

Free Get it free

SAML: hand-drawn explainer poster

SAML

SAML

SAML 2.0 single sign-on explained: the signed assertion, the login flow, and how it breaks.

Free Get it free

SQL Injection: hand-drawn explainer poster

SQL Injection

SQL Injection

SQL Injection (SQLi) from first principles: auth bypass, UNION, blind, and the one real fix.

Free Get it free

XSS: hand-drawn explainer poster

XSS

XSS

Cross-Site Scripting (XSS): reflected, stored and DOM-based, and why it's far more than alert(1).

Free Get it free

Also in the shop

All flyers in HD (PDF)$15 Burp Suite Plugin Development Guide$10 WebAuth Zine$2

Get the next one by email

New posters land in the Security Zines newsletter on Substack. Free, no spam.