NETCORE⚡MEDIA · IT Security Awareness

Web Attack Awareness Console

Three tracks, one pattern: see the vulnerable code run, flip the breaker to the hardened version, and watch the outcome change. No real requests leave this page — every "attack" runs against a local mock.

🔐

Credential Attacks

Brute force, credential stuffing, and why rate limiting + 2FA stop them.

○ Locked 🗄️

SQL Injection

Watch a raw query leak data, then see $wpdb->prepare() block it.

○ Locked 🧬

Cross-Site Scripting

Stored XSS in a comment field vs. properly escaped output.

○ Locked