Web Apps

Strengthen your web applications with tutorials and tips from the Raxis penetration testing team. Find insights to uncover and fix vulnerabilities.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as Web Apps

  • Cross-Site Scripting (XSS): Cookie Theft - Advanced Payloads

    Cross-Site Scripting (XSS): Cookie Theft – Advanced Payloads

    We reached into our vaults to bring you the final video in our cross-site scripting (XSS) series. Learn about cookie theft, website defacement, and CSRF attacks.
    Read More
  • OWASP Top 10

    OWASP Top 10 for 2025: What’s New in Web Application Security

    The OWASP Top 10 2025 for web applications release candidate was released last week. Take a look at which categories have moved as well as one new category.
    Read More
  • HTTP/1.1 Security News: What You Can Do Now

    HTTP/1.1 Security News: What You Can Do Now

    A recent Portswigger white paper on HTTP/1.1 highlights critical security issues. If you use old products that still require it, here’s what you can do.
    Read More
  • Dangers of Storing Sensitive Data in Web Storage: 5 Real Attack Scenarios

    Dangers of Storing Sensitive Data in Web Storage: 5 Real Attack Scenarios

    Lead Penetration Tester Ryan Chaplin walks us through 5 real-world attack scenarios used in real-world penetration tests by Raxis.
    Read More
  • OWASP Top 10 for LLM Applications

    OWASP Top 10 for LLM Applications Penetration Testing

    Lead Penetration Tester Jason Taylor looks at OWASP’s Top 10 list for LLM applications for penetration testing as AI machine learning becomes prevalent.
    Read More
  • OWASP Top 10

    OWASP Top 10: The Bedrock of an Application Penetration Test

    When performing web app, mobile app, and API penetration tests, we refer to the OWASP Top 10. Here we’ll discuss what that means and why it’s helpful.
    Read More