Web Security

35 free hand-drawn cheat sheets on how browsers and web apps get attacked, and the controls that stop it.

Visual explanations of how web applications are attacked and defended: XSS, CSRF, IDOR, SSTI, XXE, file inclusion, request smuggling and ReDoS, plus the browser controls that stop them (Same Origin Policy, CORS, CSP, cookies and HTTP headers) and Burp Suite for testing.