Web Development
Frontends, backends, runtimes and the open web platform — from CSS layout to edge deploys and API design.
$ ls -t ~/web-development
SSRF tricks your server into making requests to internal systems — cloud metadata services, internal APIs, AWS credentials endpoints. It turned a WAF misconfiguration into 100 million stolen Capital One records
Your application is only as secure as every package it depends on. In September 2025, attackers compromised 27 npm packages with 2.6 billion weekly downloads by phishing one maintainer.
XSS injects malicious JavaScript into web pages served to other users — stealing sessions, redirecting to phishing pages, or silently exfiltrating data. It's been in the OWASP Top 10 since 2003. Here's every type, how each one works, and how to actually fix them.
In 2008, attackers used SQL injection to breach Heartland Payment Systems, a payment processing company. They stole 130 million credit and debit card numbers. The breach cost Heartland
A web server accepts HTTP requests and returns responses. Apache has been doing this since 1995. Nginx rebuilt the model in 2004 and took over the cloud. Here's how they work, how they differ, and how to pick between them.
Encryption transforms readable data into unreadable ciphertext that only someone with the right key can reverse. It's what makes HTTPS, messaging apps, banking, and password storage work. Here's how it actually functions.
Cybersecurity is the discipline of protecting systems, networks, and data from attack, damage, and unauthorized access. Here's what it actually covers, how attacks work, how defense works, and why every developer needs to understand it.
I exclusively used WordPress somewhere between 2008 to 2019 – if not earlier than that for me. At least eleven years. That's a good long time to
Tutorials that show you how to build an API in 50 lines of code are lying to you. This is what a production TypeScript API actually looks like — authentication, validation, error handling, rate limiting, database connection pooling, structured logging, and a test suite. All of it, from scratch.
An API is a contract between two pieces of software. One side defines what requests it accepts and what responses it sends. The other side follows that contract to get work done. Every app on your phone, every website pulling live data, and every service talking to another service uses APIs.
MySQL runs WordPress, which runs 43% of the web. It runs Facebook's original backend, YouTube, and GitHub. It is also a database with genuine quirks that bite people who do not know about them. Here is the full picture.
A database is organized data with a system for storing, retrieving, and modifying it reliably. Every application you have ever used depends on one. Here is how they actually work, what the different types do, and what separates a well-designed schema from one that will wreck you at scale.
$ ssh community@sudosecurity
Ask in the forums, share a snippet, or work through a course on Learn.
