Application Security

Security Assertion Markup Language (SAML) is an open standard for exchanging authentication and authorization data between parties, such as an identity provider and a service provider.

Scraping or web scraping refers to the extraction of data from websites. The term typically refers to automated processes implemented using a bot or web crawler.

Server-Side Includes (SSI) are directives present on web applications used to feed an HTML page with dynamic contents.

Server-side request forgery (also known as SSRF) is a web security vulnerability that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.

A Service Level Agreement (SLA) is the part of a contract which defines exactly what services a service provider will provide and the required level or standard for those services.

Session Fixation is an attack that permits an attacker to hijack a valid user session. The attacker must provide a legitimate web application session ID and try to make the victim's browser use it.

A Session Hijacking attack consists of the exploitation of the web session control mechanism, which is normally managed for a session token.

Session prediction is an attack technique used to hijack or impersonate a web or application user. The attack focuses on predicting session ID values that permit an attacker to bypass the authentication method of an application.