Academy Basic

Academy

Module 5 · Cross-Site Scripting (XSS) in 2026

Reflected, stored, and DOM-based XSS in 2026. Filter bypasses, CSP deep-dive, and the real impact beyond alert(1). Pro module.

Apr 19, 2026 · 11 min read

Academy

Module 4 · SQL Injection in 2026

How SQLi works at the query level, UNION-based extraction, blind SQLi (boolean and time), out-of-band exfiltration, NoSQL injection, sqlmap practice.

Apr 19, 2026 · 13 min read