https://raghu.io/categories/web-security/ Recent content in Web Security on Raghunath Gopinath Hugo -- gohugo.io en hello@raghu.io (Raghunath Gopinath) hello@raghu.io (Raghunath Gopinath) © 2026 Raghunath Gopinath Thu, 30 Apr 2026 20:36:05 +0530 https://raghu.io/how-to-install-and-configure-shield-security-step-by-step-guide/ Tue, 07 May 2024 05:15:32 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/how-to-install-and-configure-shield-security-step-by-step-guide/ https://raghu.io/security-threats-of-nulled-wordpress-plugins-and-themes-uncovering-the-hidden-dangers/ Fri, 12 Apr 2024 04:23:30 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/security-threats-of-nulled-wordpress-plugins-and-themes-uncovering-the-hidden-dangers/ https://raghu.io/enhancing-the-security-of-wordpress-sites-best-practices-and-tips/ Wed, 20 Mar 2024 15:30:01 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/enhancing-the-security-of-wordpress-sites-best-practices-and-tips/ https://raghu.io/xss-explained-learn-cross-site-scripting-with-examples/ Fri, 25 Nov 2022 11:35:43 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-explained-learn-cross-site-scripting-with-examples/ https://raghu.io/dvwa-brute-force-attack-and-prevention-explained/ Fri, 30 Sep 2022 06:53:00 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/dvwa-brute-force-attack-and-prevention-explained/ https://raghu.io/mitigating-xss-vulnerability/ Sat, 20 Aug 2022 04:30:12 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/mitigating-xss-vulnerability/ https://raghu.io/mitigating-command-injection/ Wed, 10 Aug 2022 09:47:10 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/mitigating-command-injection/ https://raghu.io/dvwa-brute-force-attack-high-severity/ Thu, 04 Aug 2022 11:44:26 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/dvwa-brute-force-attack-high-severity/ https://raghu.io/dvwa-brute-force-attack-medium-severity/ Wed, 03 Aug 2022 06:22:22 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/dvwa-brute-force-attack-medium-severity/ https://raghu.io/lab-setup-docker-dvwa/ Sat, 30 Jul 2022 07:42:00 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/lab-setup-docker-dvwa/ https://raghu.io/burpsuite-installation/ Thu, 28 Jul 2022 06:11:00 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/burpsuite-installation/ https://raghu.io/what-is-web-application-and-how-does-it-work/ Mon, 25 Jul 2022 14:15:00 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/what-is-web-application-and-how-does-it-work/ https://raghu.io/the-importance-of-a-security.txt-file/ Thu, 06 Jan 2022 06:15:00 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/the-importance-of-a-security.txt-file/ https://raghu.io/challenge-1-stored-cross-site-scripting-attack/ Tue, 13 Dec 2022 05:43:59 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/challenge-1-stored-cross-site-scripting-attack/ https://raghu.io/burpsuite-overview/ Fri, 29 Jul 2022 14:36:00 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/burpsuite-overview/ https://raghu.io/http-basics-tutorial/ Tue, 26 Jul 2022 08:53:00 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/http-basics-tutorial/ https://raghu.io/challenge-2-reflected-cross-site-scripting-attack/ Wed, 04 Jan 2023 15:29:55 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/challenge-2-reflected-cross-site-scripting-attack/ https://raghu.io/challenge-3-xss-bypass-blacklist-html-tags/ Fri, 13 Jan 2023 05:21:34 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/challenge-3-xss-bypass-blacklist-html-tags/ https://raghu.io/how-to-install-wordfence/ Fri, 15 Mar 2024 04:02:29 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/how-to-install-wordfence/ This step-by-step guide on how to install the Wordfence plugin will enable the standard recommended security settings for your WordPress website quickly and keep it safe from potential threats. https://raghu.io/wordpress-scan-for-vulnerabilities-a-comprehensive-guide-for-site-security/ Mon, 05 Feb 2024 17:17:03 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/wordpress-scan-for-vulnerabilities-a-comprehensive-guide-for-site-security/ WordPress scan for vulnerabilities article will guide you with step-by-step approaches and examples that can be implemented on your website to scan and identify vulnerabilities. Also, additional information about security measures, tools, and plugins is available. https://raghu.io/bug-bounty-vs-pentest-making-an-informed-decision-on-security-testing/ Sun, 14 Jan 2024 03:29:08 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/bug-bounty-vs-pentest-making-an-informed-decision-on-security-testing/ Both bug bounty and pentest play crucial roles in identifying and addressing security vulnerabilities, but they differ in their approaches. Understanding these differences helps you choose which type of security testing best suits for organizations or hackers who want to get into security testing. https://raghu.io/xss-bypass-blacklisted-js-function-challenge-14/ Tue, 21 Mar 2023 06:30:20 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-bypass-blacklisted-js-function-challenge-14/ This article goes into depth discussing an alternative JavaScript function, namely "confirm()". It serves as an alternative for the JavaScript "alert()" function when the latter is unavailable. https://raghu.io/xss-in-html-anchor-tag/ Thu, 16 Mar 2023 06:52:55 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-in-html-anchor-tag/ Check out how a security risk can arise from an improperly configured dynamic link generation tag and which can result in XSS exploitation. https://raghu.io/xss-csp-bypass-remote-payload-challenge-12/ Sat, 11 Mar 2023 06:30:06 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-csp-bypass-remote-payload-challenge-12/ Learn how to bypass a misconfigured CSP policy and how it can lead to the successful exploitation of cross-site scripting vulnerability. https://raghu.io/xss-csp-bypass-through-inline-script-challenge-11/ Sat, 04 Mar 2023 06:30:48 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-csp-bypass-through-inline-script-challenge-11/ Learn how a misconfigured CSP can be bypassed, potentially leading to the successful exploitation of cross-site scripting vulnerability. https://raghu.io/xss-bypass-backslash-escape-challenge-10/ Tue, 28 Feb 2023 06:30:15 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-bypass-backslash-escape-challenge-10/ Check out how the XSS can be exploited in the HTML <div> tags and learn more about <img> tag-based XSS payload. https://raghu.io/xss-in-hidden-input-field-challenge-9/ Fri, 24 Feb 2023 06:42:44 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-in-hidden-input-field-challenge-9/ Check out how the XSS can also be exploited in hidden input parameter fields with examples. https://raghu.io/xss-bypass-improper-output-encoding-challenge-8/ Mon, 20 Feb 2023 04:45:53 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-bypass-improper-output-encoding-challenge-8/ Learn how the partially implemented HTML output encoding can be bypassed for exploiting XSS vulnerability using the HTML5 attributes https://raghu.io/xss-in-dropdown-list-challenge-7/ Fri, 10 Feb 2023 05:40:27 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-in-dropdown-list-challenge-7/ Learn how the XSS vulnerability can be found in other params even though it is not editable by the browser using the BurpSuite Proxy tool https://raghu.io/xss-bypass-client-side-blacklist-validation-challenge-6/ Mon, 06 Feb 2023 11:22:01 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-bypass-client-side-blacklist-validation-challenge-6/ Learn why client-side validation cannot be trusted all the time and how it can be tampered with by using BurpSuite as a proxy for exploiting XSS https://raghu.io/xss-bypass-client-side-length-limit-challenge-5/ Thu, 02 Feb 2023 05:48:16 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-bypass-client-side-length-limit-challenge-5/ Learn why client-side validation cannot be trusted all the time and how it can be tampered with by browser debugging tools for exploiting XSS https://raghu.io/xss-using-html-attribute-challenge-4/ Wed, 18 Jan 2023 07:29:22 +0000 hello@raghu.io (Raghunath Gopinath) https://raghu.io/xss-using-html-attribute-challenge-4/ Learn how the XSS payload can be crafted using HTML5 event attributes rather than using the classic <script> tag