Application Security

Null Byte Injection is an active exploitation technique used to bypass sanity checking filters in web infrastructure by adding URL-encoded null byte characters (i.e. %00, or 0x00 in hex) to the user-supplied data.

The OAuth 2.0 authorization framework is a protocol that allows a user to grant a third-party web site or application access to the user's protected resources, without necessarily revealing their long-term credentials or even their identity.

The OWASP API Security Top 10 is a list of the ten most critical security risks for APIs, updated in 2023. The risks include Broken Object Level Authorization, Broken Authentication, Broken Object Property Level Authorization, and Unrestricted Resource Consumption.

OWASP ESAPI (Enterprise Security API) is a free, open-source web application security control library. Originally designed to help developers retrofit security into existing code, it provides a unified set of classes for core security functions.

The OWASP Top 10 (last updated 2025) is a consensus list of the most critical security risks to web applications, compiled by the Open Web Application Security Project (OWASP).

The OWASP Mobile Top 10 is a periodically updated list published by the Open Web Application Security Project (OWASP) that highlights the most critical security risks affecting mobile applications.

The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking.

HTTP Parameter Pollution is a web application vulnerability which occurs when hackers hide scripts and processes in URLs.