Breaking Python Web Apps
Build deliberately vulnerable Python web apps in Flask and Django - then exploit them yourself. Every lesson walks through the vulnerable code, the attack, and the fix.
3 LessonsWhy Pentesters Should Understand Backend Code
Most pentesters test web applications the same way – open Burp Suite, intercept requests, throw payloads, check responses. If something breaks, great. If not, move on....
Part 1: Understanding Routes in Flask & Building Your First XSS-Vulnerable App
If you’re getting into web security, at some point you have to stop just reading about vulnerabilities and actually build something broken with your own hands....
Part 2: Building the Login System – Sessions, Cookies & User Enumeration
In Part 1, we built our first Flask app, understood how routes work, and made an intentionally XSS-vulnerable page. Now we’re adding a login system. We’re...