Authentication Pentesting: Review the Entire Account Lifecycle
Assess registration, login, recovery, sessions, and account changes as one connected security boundary.

A space to connect knowledge, one line of code a day.
Discover tutorials, ideas, and notes from a learning journey.
Assess registration, login, recovery, sessions, and account changes as one connected security boundary.
Design and assess outbound request features so user-controlled URLs cannot silently cross server network trust boundaries.
Connect deployment settings, browser headers, cookies, and exposed services to observable risks rather than scanner scores.
Turn controlled security tests into evidence that important events are recorded, correlated, and delivered to responders.
Stay curious. There is always something new to learn.
Writer and founder of Diary Coding — sharing notes, tutorials, and experiences about programming for anyone who wants to keep learning.