Skip to content

DEV Community

Browser-Side Security & Zero-Trust Forensics Series' Articles

Back to Muhammad Ali Mughal's Series

Cover image for Deobfuscating Malicious npm & Browser Payloads: Base64, Hex, Unicode Escapes & Homoglyphs

Muhammad Ali Mughal

Oct 30

Deobfuscating Malicious npm & Browser Payloads: Base64, Hex, Unicode Escapes & Homoglyphs

#security #javascript #webdev #npm

8 min read

Cover image for Webhook Security in Production: HMAC-SHA256 Signatures, Timestamp Drift & Replay Protection

Muhammad Ali Mughal

Oct 31

Webhook Security in Production: HMAC-SHA256 Signatures, Timestamp Drift & Replay Protection

#security #webdev #api #node

8 min read

Cover image for OAuth 2.1, OIDC ID Tokens & PKCE Forensics: Auditing Claims, Nonces & Audience Confusion in SPAs

Muhammad Ali Mughal

Oct 31

OAuth 2.1, OIDC ID Tokens & PKCE Forensics: Auditing Claims, Nonces & Audience Confusion in SPAs

#security #oauth #javascript #webdev

9 min read

Cover image for Regular Expression Denial of Service (ReDoS) in JS & PHP: Spotting Catastrophic Backtracking

Muhammad Ali Mughal

Nov 1

Regular Expression Denial of Service (ReDoS) in JS & PHP: Spotting Catastrophic Backtracking

#security #javascript #php #webdev

8 min read

Cover image for Subdomain Takeover & Dangling DNS Reconnaissance: Auditing CNAME, NS, TXT & TLS Certificates

Muhammad Ali Mughal

Nov 1

Subdomain Takeover & Dangling DNS Reconnaissance: Auditing CNAME, NS, TXT & TLS Certificates

#security #dns #webdev #devops

9 min read

Cover image for Zero-Trust Reverse Proxy Hardening in Nginx: Rate Limiting, Request Smuggling Guards & mTLS

Muhammad Ali Mughal

Nov 2

Zero-Trust Reverse Proxy Hardening in Nginx: Rate Limiting, Request Smuggling Guards & mTLS

#nginx #security #devops #webdev

9 min read