How the web works (Client–Server model)

What Happens When You Enter a URL in the Browser

HTTP Methods ,Headers and Status Code

DNS Basics

TLS/SSL Basics


🔹 2. Web Technologies

Databases in Web Pentesting (SQL & NoSQL)

Web Servers (Apache, Nginx, IIS) – Pentesting Basics

APIs (REST & GraphQL) – Pentesting Basics


🔹 3. Authentication & Session Management

Cookies in Web Pentesting

Sessions & Tokens (JWT, OAuth, SAML) – Web Pentesting Basics

Password Handling (Hashing, Salting, bcrypt/argon2)


🔹 4. Security Concepts

Same-Origin Policy (SOP)

Cross-Origin Resource Sharing (CORS)

Content Security Policy (CSP)