Skip to content

Work

Introduction

A vulnerability is a weakness that can compromise a system’s security. Studying the underlying cause is more useful than memorising attack names alone.

Why it matters

Recognising unsafe input handling, missing access checks and unintended data exposure improves development and incident triage. Understanding preconditions and impact also helps distinguish a reproducible security issue from a speculative concern.

Key topics to explore

  • Injection and unsafe interpretation of input
  • Cross-site scripting and output encoding
  • Broken access control and object ownership
  • Cross-site request forgery and session context
  • Server-side request forgery and sensitive data exposure

Practice & notes

Possible first exercise: Use a deliberately vulnerable local lab to examine one failure at a time. Record its cause, preconditions, impact and a test that demonstrates the fix.

Future notes will record the setup, observations, open questions and principles learned. This exercise is a starting idea, not a completed assessment.