Aravind Kumar SVG aravindkumarsvg

🔥 HTTP Request Smuggling Cheat Sheet

🧠 Core Idea

Smuggling happens when:

Frontend (proxy/load balancer) and
Backend (app server)

disagree on request boundaries

URI Delimiters & Parsing Differences

🌐 Standard URI Delimiters (RFC 3986)

Delimiter	Purpose
`?`	Start query string
`&`	Query param separator

JSONP Security Cheat Sheet

🌐 What is JSONP?

JSONP (JSON with Padding) is a technique to fetch cross-origin data using

<script> tags.

Reflection & Related Concepts Cheat Sheet

What is Reflection?

Reflection allows a program to inspect and modify its own structure and behavior at runtime.

Reflection in Java

Insecure Deserialization & Gadget Chains — Cheat Sheet

Core Concept

Insecure deserialization occurs when untrusted data is deserialized into objects, allowing attackers to abuse object lifecycle methods and existing code paths (gadgets) to trigger unintended behavior such as RCE.

Attackers inject object graphs, not code.

Key Terms

🧭 Communications Between Windows, Documents & Contexts

📘 Comprehensive Developer & Security Cheatsheet

🧩 1. Overview

Modern web applications often require communication between multiple browsing contexts — windows, iframes, tabs, popups, or even workers.
The browser provides several APIs for this, each suited for different scenarios.

	/**
	* Prerequisites:
	*
	* 1. Update the Basic Authorization value
	* 2. Install deno runtime - https://docs.deno.com/runtime/getting_started/installation/
	*
	* Command:
	*
	* deno run --node-modules-dir=none --allow-net --allow-env natas19.js
	*/

	/**
	* Prerequisites:
	*
	* 1. Update the Basic Authorization value
	* 2. Install deno runtime - https://docs.deno.com/runtime/getting_started/installation/
	*
	* Command:
	*
	* deno run --node-modules-dir=none --allow-net --allow-env natas18.js
	*/

	/**
	* Prerequisites:
	*
	* 1. Update the Basic Authorization value
	* 2. Install deno runtime - https://docs.deno.com/runtime/getting_started/installation/
	*
	* Command:
	*
	* deno run --node-modules-dir=none --allow-net --allow-env natas17.js
	*/

	/**
	* Prerequisites:
	*
	* 1. Update the Basic Authorization value
	* 2. Install deno runtime - https://docs.deno.com/runtime/getting_started/installation/
	*
	* Command:
	*
	* deno run --node-modules-dir=auto --allow-net --allow-env natas16.js
	*