Web security

1. Attacks
2. Authentication
3. Defenses
4. Practical security implementation guides
5. Threat modeling
6. Cross-site request forgery (CSRF)
7. Clickjacking
8. Insecure Direct Object Reference (IDOR)
9. Manipulator in the Middle (MITM)
10. Phishing
11. JavaScript prototype pollution
12. Server Side Request Forgery (SSRF)

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.