Security Lab
Defensive tools: threat models, safe queries, encoding, crypto and more. Build a STRIDE threat model and risk register; compare parameterized and concatenated SQL (the safe one runs on SQLite in your browser); encode one value for five output contexts; check file paths and outbound URLs; hash passwords with real PBKDF2; test an authorization matrix by injecting bugs; tamper with real AES-GCM ciphertext; audit security headers and cookies; simulate rate limiters; verify signed webhooks; drive a secure order state machine; and redact logs.