# Application Security Handbook

## Application Security Handbook

- [Application Security Handbook](https://0xn3va.gitbook.io/application-security-handbook/introduction.md)
- [Authentication](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication.md)
- [Authentication with Login and Password](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/authentication-with-login-and-password.md)
- [Authentication with Phone Number](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/authentication-with-phone-number.md)
- [OAuth 2.0 Authentication](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/oauth-2.0-authentication.md)
- [Multi-factor Authentication](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/multi-factor-authentication.md)
- [Default Passwords](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/default-passwords.md)
- [Password Change](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/password-change.md)
- [Password Policy](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/password-policy.md)
- [Password Reset](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/password-reset.md)
- [Password Storage](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/password-storage.md)
- [One Time Password (OTP)](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/one-time-password-otp.md)
- [Email Address Confirmation](https://0xn3va.gitbook.io/application-security-handbook/web-application/authentication/email-address-confirmation.md)
- [Authorization](https://0xn3va.gitbook.io/application-security-handbook/web-application/authorization.md)
- [Concept of Trusted Devices](https://0xn3va.gitbook.io/application-security-handbook/web-application/concept-of-trusted-devices.md)
- [Content Security Policy (CSP)](https://0xn3va.gitbook.io/application-security-handbook/web-application/content-security-policy-csp.md)
- [Cookie Security](https://0xn3va.gitbook.io/application-security-handbook/web-application/cookie-security.md)
- [Cryptography](https://0xn3va.gitbook.io/application-security-handbook/web-application/cryptography.md)
- [Cryptographic Keys Management](https://0xn3va.gitbook.io/application-security-handbook/web-application/cryptography/cryptographic-keys-management.md)
- [Encryption](https://0xn3va.gitbook.io/application-security-handbook/web-application/cryptography/encryption.md)
- [Hash-based Message Authentication Code (HMAC)](https://0xn3va.gitbook.io/application-security-handbook/web-application/cryptography/hash-based-message-authentication-code-hmac.md)
- [Hashing](https://0xn3va.gitbook.io/application-security-handbook/web-application/cryptography/hashing.md)
- [Random Generators](https://0xn3va.gitbook.io/application-security-handbook/web-application/cryptography/random-generators.md)
- [Universal Unique Identifier (UUID)](https://0xn3va.gitbook.io/application-security-handbook/web-application/cryptography/universal-unique-identifier-uuid.md)
- [Error and Exception Handling](https://0xn3va.gitbook.io/application-security-handbook/web-application/error-and-exception-handling.md)
- [File Upload](https://0xn3va.gitbook.io/application-security-handbook/web-application/file-upload.md)
- [Input Validation](https://0xn3va.gitbook.io/application-security-handbook/web-application/input-validation.md)
- [JSON Web Token (JWT)](https://0xn3va.gitbook.io/application-security-handbook/web-application/json-web-token-jwt.md)
- [Logging and Monitoring](https://0xn3va.gitbook.io/application-security-handbook/web-application/logging-and-monitoring.md)
- [Output Encoding](https://0xn3va.gitbook.io/application-security-handbook/web-application/output-encoding.md)
- [Regular Expressions](https://0xn3va.gitbook.io/application-security-handbook/web-application/regular-expressions.md)
- [Sensitive Data Management](https://0xn3va.gitbook.io/application-security-handbook/web-application/sensitive-data-management.md)
- [Session Management](https://0xn3va.gitbook.io/application-security-handbook/web-application/session-management.md)
- [Transport Layer Protection](https://0xn3va.gitbook.io/application-security-handbook/web-application/transport-layer-protection.md)
- [Vulnerability Mitigation](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation.md)
- [Brute-force](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/brute-force.md)
- [Command Injection](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/command-injection.md)
- [Cross-Site Request Forgery (CSRF)](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/cross-site-request-forgery-csrf.md)
- [Cross-Site Scripting (XSS)](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/cross-site-scripting-xss.md)
- [Mass Parameter Assignment](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/mass-parameter-assignment.md)
- [Parameter Pollution](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/parameter-pollution.md)
- [Path Traversal](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/path-traversal.md)
- [Regular Expression Denial of Service (ReDoS)](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/regular-expression-denial-of-service-redos.md)
- [SQL Injection (SQLi)](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/sql-injection.md)
- [XML External Entity (XXE) Injection](https://0xn3va.gitbook.io/application-security-handbook/web-application/vulnerability-mitigation/xml-external-entity-xxe-injection.md)