JavaScript fetch with Credentials
Using `fetch` with Credentials in JavaScript When you call an API from JavaScript, the browser's `fetch` API does **not** automatically send cookies or HTTP authentication header…
All notes
100 notesUsing `fetch` with Credentials in JavaScript When you call an API from JavaScript, the browser's `fetch` API does **not** automatically send cookies or HTTP authentication header…
# WebSocket Protocol Security WebSockets are a **full-duplex, persistent communication channel** built on top of TCP, initiated through an HTTP-compatible upgrade handshake. Once…
A **Service Filter** in Windows Firewall with Advanced Security is a rule property that limits a firewall rule to traffic associated with a specific Windows service. Instead of ap…
# Get-Member CmdLet `Get-Member` is a PowerShell discovery CmdLet that reveals the **members** (properties, methods, events, and other object attributes) of any object piped into…
# Parsing Binary Formats with Construct `construct` is a Python library that lets you describe binary file layouts as data structures instead of writing manual `struct.unpack` ca…
# Normalization vs Canonicalization in Pentest Input Handling In security tooling, you often compare inputs against a signature database. The attacker controls the input, and you…
# Python File Handling Pitfalls Cheat Sheet When writing security scripts that ingest logs, configs, signatures, or binary payloads, small file-handling mistakes can silently bre…
# Global Variables in Python A **global variable** in Python is a variable declared at the top level of a module file, outside any function or class. It is accessible anywhere in…
# Single Responsibility Principle in Security Scripts The **Single Responsibility Principle** (SRP) says a function or module should have one reason to change — it should do one …
# How Displays Produce Images A display creates the illusion of a continuous image by lighting up a grid of tiny picture elements called **pixels**. Even though a screen looks li…
# Defensive Input Handling for Security Scripts Security scripts often process data that comes from untrusted or messy sources: scan output, logs, network traffic, user uploads, …
# Counter in Python `Counter` is a specialized dictionary class from the `collections` module in Python's standard library. It is designed for **counting hashable objects**. ## …
# Designing Python Scripts for Automation and Pipelines A script is rarely the final destination. In pentest, forensics, and reverse engineering work, Python tools usually feed o…
# Exiting a Python Script Cleanly Scripts need to finish in a way that tells the caller (or the shell) whether they succeeded or failed. The way you exit matters for automation, …
# Python Syntax Recall and Fluency for Security Work Many learners struggle with Python syntax not because they are "bad at memorizing," but because they are trying to memorize *…
# Python Essentials for Security Scripting A review of core Python syntax, data structures, and file I/O with an emphasis on writing clean, maintainable security scripts for pent…
# Maximum Transmission Unit (MTU) The **Maximum Transmission Unit (MTU)** is the largest size (in bytes) of a single protocol data unit that can be transmitted over a network lin…
# PowerShell + Python Acquisition Pipeline A practical exercise pattern from the book's philosophy: use **PowerShell** for acquiring raw data from Windows systems and **Python** …
PowerShell provides several ways to replace strings inside files using the standard **verb-noun** [[CmdLet]] pairs `Get-Content` and `Set-Content`, plus the `-replace` operator. …
# Internet Protocol Suite The **Internet Protocol Suite**, also known as the **TCP/IP protocol suite**, is the collection of protocols used to implement networking functions on t…