r/websec

1.2K archived posts · Dec 2009 – Sep 2025

Discussion and Disclosure of Web Vulnerabilities

r/websec

/r/Save3rdPartyApps | This subreddit has gone private until the API situation is resolved

Created Dec 14, 2009

7.4KMembers (last snapshot)

1.2KArchived posts

In a world that is increasingly online Web Security takes on an important role. The exploitation of a single popular web server can be used to infect hundreds or thousands of individuals, compromise user identities, and otherwise add a lot of ick to someone's day.

Websec was created as a forum for discussed all web based vulnerabilities. This includes attacks directly against websites (XSS, SQL Injection, CSRF, code injection) as well as those that target infrastructure (DNS-based attacks, mitm). This intention is to go beyond just the basics for people who need practical knowledge (either as developers or hosts) to keep their projects secure.

We also encourage the discussion of active exploits, particularly in situations where the affected party was unresponsive. As the goal is education, novel approaches and explanations are appreciated.

Other communities

Reddit Rebuilt is an independent, non-commercial archive and is not affiliated with Reddit, Inc. Content belongs to its original authors.