Code Review
Whitebox testing: finding bugs by reading the source instead of poking the app.
How to review code for security
Not reading every line — following untrusted input to where it lands.
beginnerDangerous functions (sinks)
The families of function where input becomes dangerous.
intermediateTracing user input (source to sink)
The one habit that explains most web bugs at once.
intermediateSecrets in code
Hardcoded creds and keys — how they leak and how to find them.
beginner