How to Prevent Broken Object Level Authorization (IDOR) in a FastAPI App
Build a small FastAPI invoicing API, attack it as an ordinary...
Browse Tag
Application Security
24 Articles
How to Encrypt PII in Python and Keep It Searchable With Blind Indexes
Build a Python and SQLite lab that encrypts emails and SSNs with...
How to Verify Webhook Signatures in Python and Stop Forged, Tampered, and Replayed Events
Build a FastAPI webhook receiver that rejects forged, edited,...
How to Build a Private Certificate Authority and Enforce Mutual TLS in Python
Build a private certificate authority with the cryptography...
How to Audit Python .pth Startup Hooks and Migrate to Python 3.15 .start Files
Learn how Python .pth import lines run code at every startup,...
Cloudflare Traces Turns Distributed Tracing Into a Trust Decision at the Edge
Cloudflare Traces entered open beta on October 2 with a setting...
Trail of Bits’ SequenceHash Turns Hash-Concatenation Bugs Into a Specification Problem
Trail of Bits released SequenceHash, a hash-agnostic way to hash...
How to Catch a Malicious Python Package at Import Time With Audit Hooks
Build a small monitor on sys.addaudithook that imports a package...
How to Run Untrusted Plugin Code in a WebAssembly Sandbox From Python With Wasmtime
Learn to run untrusted plugin code from Python inside a...
How to Detect and Strip Invisible Unicode in Python to Stop ASCII Smuggling and Trojan Source
Build a standard-library Python scanner that finds invisible and...