Web
Lessons filed under Web.
Web HTTP and APIs from the shell Learn to send a request and read the reply from the shell with curl and python.
Web How a web request is handled Follow a single request end to end, then close the flaw in the path it carries.
Web Input you do not control Take a value from the query string, crash a server with it, then validate it properly.
Web Injection: when data becomes code Make a server run a command you did not write, then stop it doing that.
Web Cross-site scripting Make a search page run your script, then make it show your script as text.
Web Broken access control and misconfiguration Ask for another user's record and for the admin area, then make the server say no.