SecurityZines.com
Threat Modelling
Threat Modelling
The basics of a threat model, with fun.
$2+
Buy the zine
The zines
Illustrated booklets that take one topic all the way down: the idea, the attack, the fix. Buy one, or get every zine (and the ones not drawn yet) with the membership.
Phishing
Phishing
The most notorious security issue, and how the bait works.
$5+
Buy the zine
Docker & Containers
Docker & Containers
The stack behind modern application runtimes.
$6
Buy the zine
Same Origin Policy
Same Origin Policy
How the Same Origin Policy (SOP) protects the browser, origin by origin.
$4
Buy the zine
CSRF
CSRF
Cross-Site Request Forgery (CSRF / XSRF) end to end: how a forged request rides your session, and how to stop it.
Free
Get it free
HTTP
HTTP
HTTP explained for security: the request, the response, status codes, and HTTP/1.1 to HTTP/3 over TLS.
Free
Get it free
SAML
SAML
SAML 2.0 single sign-on explained: the signed assertion, the login flow, and how it breaks.
Free
Get it free
SQL Injection
SQL Injection
SQL Injection (SQLi) from first principles: auth bypass, UNION, blind, and the one real fix.
Free
Get it free
XSS
XSS
Cross-Site Scripting (XSS): reflected, stored and DOM-based, and why it's far more than alert(1).
Free
Get it free