Web Security (OWASP, JWT, XSS, CSRF) Interview Questions

OWASP Top 10, JWT, XSS/CSRF mitigation, SQL Injection, and secure headers.

51 questions in this section

OWASP Top 10 Overview (Intermediate)
JWT Security (Intermediate)
XSS: Cross-Site Scripting (Intermediate)
CSRF: Cross-Site Request Forgery (Intermediate)
CORS (Cross-Origin Resource Sharing) (Beginner)
SQL Injection (SQLi) (Beginner)
Hashing vs. Encryption (Beginner)
HTTPS & TLS (Intermediate)
Rate Limiting & Brute Force (Beginner)
Security Headers (Helmet) (Intermediate)
Bcrypt: Salt & Cost (Intermediate)
OAuth 2.0 & OpenID Connect (Advanced)
Session Fixation (Advanced)
SSRF (Server-Side Request Forgery) (Advanced)
Clickjacking (Intermediate)
Sanitizing vs. Validating (Beginner)
Broken Access Control (Intermediate)
Password Complexity (Beginner)
DoS vs. DDoS (Beginner)
Man-in-the-Middle (MITM) (Beginner)
Homograph Attack (Advanced)
The Purpose of Salt (Intermediate)
Pepper vs. Salt (Advanced)
Insecure Deserialization (Advanced)
JSON Poisoning (Intermediate)
Directory Traversal (Beginner)
Principle of Least Privilege (Beginner)
Zero Trust (Advanced)
CSP: Content Security Policy (Advanced)
Subresource Integrity (SRI) (Intermediate)
Same-Origin Policy (SOP) (Intermediate)
Brute Force Protection (Beginner)
CSPRNG (Advanced)
Data at Rest (Intermediate)
Security Misconfiguration (Beginner)
Phishing Protection (Beginner)
Social Engineering (Beginner)
Buffer Overflow (Advanced)
Blind SQL Injection (Advanced)
API Security (Intermediate)
XXE Attack (Advanced)
Broken Auth (Intermediate)
Information Disclosure (Beginner)
Side-Channel Attack (Advanced)
Nonces (Intermediate)
MFA Factors (Beginner)
Honey Tokens (Advanced)
Penetration Testing (Intermediate)
Reentrancy (Advanced)
Cold Boot Attack (Advanced)
Cloud Isolation (Intermediate)

JavaScript is required for the interactive version of this page, including the code playground and progress tracking. Browse all InternHack tutorials.