Dashboard Learn Daily Drop Build Machines Glossary

Messages My Notes Resources Support us Settings

0day streak

0pts

Copilotfree, in-browser

Ask me anything about your lessons or your code.

“What is a port?” · “Why is my code erroring?”

token

Identity and Access

A string that stands in for a login the user already did, presented on later requests so they do not re-authenticate every time. Anyone holding it is treated as that user, which is why tokens leaking into logs, URLs, and browser storage is such a problem.

Related terms

Appears in(84)

Working With TextPython Deep Dive
What a Backend IsBackends and APIs
How Language Models WorkBuilding with AI
HTTP Methods and Status CodesBackends and APIs
Prompt EngineeringBuilding with AI
Building on the APIBuilding with AI
RAG and EmbeddingsBuilding with AI
Authentication and API SecurityBackends and APIs
AI Agents and ToolsBuilding with AI
Cookies, Sessions, and AuthWeb and HTTP
Intercepting ProxiesWeb and HTTP
PKI and CertificatesCryptography
Common AD AttacksActive Directory
Windows Architecture and ProcessesWindows Fundamentals
The Windows RegistryWindows Fundamentals
Windows Permissions and PrivilegesWindows Fundamentals
PowerShell for SecurityWindows Fundamentals
Windows Event LogsWindows Fundamentals
Windows Networking and SMBWindows Fundamentals
Python Crash Course for HackersPython for Security
Talking HTTP with PythonPython for Security
Container Security BasicsDocker and Containers
SQL InjectionWeb Application Attacks
Cross-Site ScriptingWeb Application Attacks
Server-Side Request ForgeryWeb Application Attacks
Insecure DeserializationWeb Application Attacks
Attacking AuthenticationWeb Application Attacks
A Real Testing WorkflowBurp Suite
MeterpreterThe Metasploit Framework
Post-ExploitationThe Metasploit Framework
A Repeatable Windows Privesc MethodWindows Privilege Escalation
Service MisconfigurationsWindows Privilege Escalation
Token ImpersonationWindows Privilege Escalation
Dangerous Privileges and InstallersWindows Privilege Escalation
Hunting for CredentialsWindows Privilege Escalation
Memory ForensicsDigital Forensics
What a SIEM DoesSIEM and Log Analysis
VPNs and Zero TrustNetwork Defense
Cloud Models and Shared ResponsibilityCloud Security Fundamentals
Identity in the CloudCloud Security Fundamentals
Common Cloud MisconfigurationsCloud Security Fundamentals
AWS Building Blocks for SecurityAWS Security
Enumerating AWS With KeysAWS Security
Kubernetes ArchitectureKubernetes Security
Pods, Services, and RBACKubernetes Security
Common Cluster MisconfigurationsKubernetes Security
Attacking a ClusterKubernetes Security
Hardening a ClusterKubernetes Security
How Modern APIs WorkAPI Security
The OWASP API Top 10API Security
Broken Object Level AuthorizationAPI Security
API Authentication FlawsAPI Security
Testing an APIAPI Security
Managing SecretsSecure Coding
Security Code ReviewSecure Coding
Android App InternalsMobile Application Security
iOS App InternalsMobile Application Security
Common Mobile VulnerabilitiesMobile Application Security
Testing a Mobile AppMobile Application Security
Firmware BasicsIoT and OT Security
Common IoT WeaknessesIoT and OT Security
Why Crypto Implementations FailCryptographic Attacks
Encoding Is Not EncryptionCryptographic Attacks
Recognizing Bad CryptoCryptographic Attacks
What Threat Modeling Buys YouThreat Modeling
STRIDEThreat Modeling
Threat Modeling a Real AppThreat Modeling
Turning Threats Into FixesThreat Modeling
Structuring a ReportWriting Security Reports
Writing a FindingWriting Security Reports
Race ConditionsAdvanced Web Attacks
Attacking GraphQLAdvanced Web Attacks
Authentication vs AuthorizationIdentity and Access Management
SSO and FederationIdentity and Access Management
MFA Done RightIdentity and Access Management
What Zero Trust Really MeansZero Trust Architecture
Identity as the PerimeterZero Trust Architecture
Why Email Is a TargetEmail Security
Investigating a PhishEmail Security
How DNS Really WorksDNS and Network Services Security
The Supply Chain Attack SurfaceSoftware Supply Chain Security
Dependency RiskSoftware Supply Chain Security
Securing CI/CDSoftware Supply Chain Security
Data Loss PreventionData Protection and Privacy