Dashboard Learn Daily Drop Build Machines Glossary

Messages My Notes Resources Support us Settings

0day streak

0pts

Copilotfree, in-browser

Ask me anything about your lessons or your code.

“What is a port?” · “Why is my code erroring?”

authentication

Web and HTTP

Proving who someone is, usually with a password, a key, or a code from a phone. It answers 'who are you', and nothing else about access makes sense until that is settled.

Related terms

Appears in(61)

TCP, UDP, and PortsNetworking Foundations
Building a REST APIBackends and APIs
Connecting the API to a DatabaseBackends and APIs
Service and Version DetectionRecon and Scanning
Authentication and API SecurityBackends and APIs
HTTP FundamentalsWeb and HTTP
Cookies, Sessions, and AuthWeb and HTTP
The OWASP Top 10Web and HTTP
Threat Modeling Your LifeDigital Self-Defense
Passwords and AuthenticationDigital Self-Defense
IDOR and SSRFVulnerabilities and Exploitation
Your Privacy ToolkitDigital Self-Defense
Hashing and IntegrityCryptography
TLS in PracticeCryptography
Active Directory FundamentalsActive Directory
Common AD AttacksActive Directory
The Human Attack SurfaceSocial Engineering
Physical and OSINTSocial Engineering
Defending PeopleSocial Engineering
Windows Permissions and PrivilegesWindows Fundamentals
Windows Event LogsWindows Fundamentals
Windows Networking and SMBWindows Fundamentals
SQL InjectionWeb Application Attacks
Server-Side Request ForgeryWeb Application Attacks
Attacking AuthenticationWeb Application Attacks
Access Control and IDORWeb Application Attacks
Token ImpersonationWindows Privilege Escalation
Defending a Wireless NetworkWireless Security
Google DorkingOpen Source Intelligence
Log Analysis for RespondersIncident Response
Log Sources That MatterSIEM and Log Analysis
Correlation and AlertingSIEM and Log Analysis
VPNs and Zero TrustNetwork Defense
Detecting Lateral MovementNetwork Defense
Common Cloud MisconfigurationsCloud Security Fundamentals
How Modern APIs WorkAPI Security
The OWASP API Top 10API Security
Broken Object Level AuthorizationAPI Security
API Authentication FlawsAPI Security
Common Mobile VulnerabilitiesMobile Application Security
Common IoT WeaknessesIoT and OT Security
ICS and OT PrimerIoT and OT Security
Encoding Is Not EncryptionCryptographic Attacks
Recognizing Bad CryptoCryptographic Attacks
STRIDEThreat Modeling
Staying SharpBreaking Into Security
Authentication vs AuthorizationIdentity and Access Management
SSO and FederationIdentity and Access Management
MFA Done RightIdentity and Access Management
What Zero Trust Really MeansZero Trust Architecture
The Pillars of Zero TrustZero Trust Architecture
Identity as the PerimeterZero Trust Architecture
Rolling Out Zero TrustZero Trust Architecture
Why Email Is a TargetEmail Security
SPF, DKIM, and DMARCEmail Security
Phishing Defense in DepthEmail Security
Secure Email GatewaysEmail Security
Investigating a PhishEmail Security
Securing DNSDNS and Network Services Security
DHCP and NTP RisksDNS and Network Services Security
Securing CI/CDSoftware Supply Chain Security