🗺 Security Theory Overview
Welcome to the Security Theory section. These notes are organized from the Niebezpiecznik cybersecurity training (March 2026) and cover OWASP-aligned attack categories.
How to use this section
- Each page covers one attack type or concept
- Look for the 💡 Easy to remember box on each page — it's your quick recall hook
- The TL;DR at the top gives you the 1-sentence summary
Topics covered
| # | Topic | Category |
|---|---|---|
| 1 | Reconnaissance | 🔵 Recon |
| 2 | IDOR | 🔴 Access Control |
| 3 | Path Traversal | 🔴 Access Control |
| 4 | Privilege Escalation | 🔴 Access Control |
| 5 | Endpoint Discovery | 🔵 Recon |
| 6 | Burp Suite (MITM proxy) | 🟠 Tools |
| 7 | TLS & Certificates | 🟡 Crypto |
| 8 | Cookies & GDPR | 🟡 Crypto |
| 9 | .git Exposure | 🟡 Crypto |
| 10 | JWT | 🟡 Crypto |
| 11 | HTTP Headers & Spoofing | 🟣 Headers |
| 12 | CSRF | 🟣 Headers |
| 13 | Cryptographic Failures | 🟡 Crypto |
| 14 | DNS Security | 🟤 DNS |
| 15 | IoT & Zero-day | 🟤 Infra |
| 16 | Injection & XSS | 🔴 Injection |