#appsec

2 posts

CSRF Vulnerability in Node.js – AppSecMaster Challenge

Walkthrough of a CSRF vulnerability exploitation in a Node.js Express application. From code review to payload delivery, demonstrating password change via cross-site request forgery.

Jun 23, 2025—15 min read

◆

Lord of SQL Injection – Part 1: Gremlin, Cobolt & Goblin

First three levels of Lord of SQL Injection: bypassing authentication on Gremlin, Cobolt, and Goblin with increasingly strict filters.

Jun 22, 2025—7 min read