Security

1. Think Like an Attacker

OWASP Top 10 Focus

1. Injection — SQL, NoSQL, Command
2. Broken Auth — Sessions, tokens
3. Sensitive Data — Passwords, keys exposed
4. XXE — XML parsing
5. Broken Access — Permissions
6. Security Misconfiguration — Debug mode, default creds
7. XSS — Unescaped output
8. Insecure Deserialization
9. Known Vulnerable Components
10. Insufficient Logging