Source code for Hacker101.com - a free online web and mobile security class.
education
security
hacking
xss
sql-injection
vulnerability
csrf
web-security
mobile-security
clickjacking
hackerone
session-fixation
hacker101
unchecked-redirects
-
Updated
Dec 10, 2021 - SCSS


.well-known(RFC) is becoming an increasingly popular destination for stashing site-wide metadata. Some of that metadata is relevant to site security or may unintentionally leak information, so we should scan it.Some starting points: