Cybersecurity
Concepts, attack vectors, and defensive techniques for application and network security.
topics
topic
Encryption
Symmetric and asymmetric encryption, AES, RSA, and real-world usage.
topic
Hashing vs Encoding
Differences between hashing, encoding, and encryption with practical examples.
topic
Cross-Site Scripting
XSS attack vectors, types (stored, reflected, DOM-based), and prevention.
topic
Cross-Site Request Forgery
CSRF attacks, token-based defenses, SameSite cookies, and double-submit patterns.
topic
SQL Injection
SQL injection techniques, parameterized queries, ORM protections, and input sanitization.
topic
TLS and SSL
Transport Layer Security, handshake protocol, certificate chains, and cipher suites.
topic
Authentication Concepts
OAuth2, OpenID Connect, JWT, session-based auth, and multi-factor authentication.
topic
Penetration Testing
Methodologies, tools (Burp Suite, Nmap, Metasploit), and ethical hacking frameworks.
topic
Firewalls
Packet filtering, stateful inspection, WAF, and network segmentation strategies.
topic
Social Engineering
Phishing, pretexting, baiting, and defense through security awareness training.