// ~/learn $ man
Learn
You cannot break what you do not understand. These guides explain how the systems work first, then where they go wrong and how to test them. Tutorials teach a task; these teach the concepts underneath.
How the Web Works
Everything that happens between typing a URL and seeing a page, layer by layer, what travels on the wire at each step, the infrastructure in between, and why every layer matters to security.
Understanding Authorization
The difference between proving who you are and deciding what you may do, the confused-deputy problem at the heart of it, the models systems use to decide, and why authorization breaks far more often than authentication.
How APIs Work
What an API is, exactly what travels over the wire in a request and response, how methods, status codes, idempotency, and content negotiation behave, and how to read and make calls yourself.
Cryptography
The building blocks every security engineer needs, from encoding versus encryption to symmetric ciphers, hashing, and public key systems, what each primitive does and does not guarantee, and why nearly every real break is misuse rather than broken math.
Web Vulnerabilities
The major classes of web application vulnerability, the handful of root causes they all reduce to, how to recognize each in code, how to fix it at the root, and how to practice legally, mapped to the OWASP Top 10.
Algorithms for Security
Why complexity, data structures, and algorithms matter to security, from denial of service through worst-case inputs and integer overflow to the graph theory behind Active Directory attack paths.
How Applications Are Built
The architecture patterns behind modern web applications, the request lifecycle every framework shares, and how knowing the structure tells you exactly where security checks live and where they get missed.