Dangerous
psql -h db.example.com -U app -c "DELETE FROM sessions WHERE user_id = '$USER_ID'"cross-platform · bash · Expert
The shell expands the variable into the SQL text before psql ever sees it, so a value containing a quote ends the literal and appends its…
The full explanation and danger signals for this pack are part of Pro.
Think you can spot these under time pressure?
Start TrainingMore Web Security
openssl x509 -in ./cert.pem -noout -textAdvancedcurl -sv --tlsv1.3 https://example.com 2>&1 | grep -i "SSL connection"Expertopenssl req -new -newkey rsa:4096 -nodes -keyout ./tls.key -out ./tls.csr -subj "/CN=example.com/O=Example"Nightmarefor f in ./certs/*.pem; do openssl x509 -in "$f" -noout -subject -enddate; doneNightmareexport NODE_TLS_REJECT_UNAUTHORIZED=0 && npm ciIntermediatecurl -k -X POST https://api.example.com/v1/deploy -H "Authorization: Bearer $TOKEN"Advanced