The UnboundCompute blog
Writing on web security
-
What is a business logic vulnerability?
A business logic vulnerability uses valid requests that break the app’s own rules. See four examples and why scanners miss every one…
-
What is an access control vulnerability? Broken access control explained
Broken access control is the number one OWASP risk. Learn what it is, see simple examples, and find out how to spot…
-
Authentication vs authorization, explained with examples
Authentication vs authorization, made clear: one proves who you are, the other decides what you can do, and confusing them breaks access…
-
What is automated penetration testing?
What is automated penetration testing? Learn how it differs from a manual pentest and a scanner, what it does well, and why…