Re:Ask HN: How can I keep my web applications secure? can th...
by _benj on Tuesday January 02, 2024 @08:48AM
(#38841540)
Depending on your level of interest you could learn some hacking. I have used tryhackme.com (no affiliation) in the past and loved it!
It’s kind of enlightening and empowering to understand how a hacker thinks, the actual tools they use and what to look in a web application to exploit it.
As a quick experience, I once came across a huge vulnerability in a web app I was working, a logged in user could pass a different user ID and our app would send all the other user ID data back!
I was part of a team with much more experience but they never considered intercepting and modifying a request to see how the app behaved
It’s kind of enlightening and empowering to understand how a hacker thinks, the actual tools they use and what to look in a web application to exploit it.
As a quick experience, I once came across a huge vulnerability in a web app I was working, a logged in user could pass a different user ID and our app would send all the other user ID data back!
I was part of a team with much more experience but they never considered intercepting and modifying a request to see how the app behaved