On Feb 16th, 2016 I gave a presentation to yycjs on security for JS developers. The presentation covers:
- Sql Injection
- Timing Attacks
- Entropy Attacks
The above link will take you to detailed explanations on the topic I’ve done previously — and I’ll work on getting a post developed for the timing attack.
As part of the presentation I used a neat tool called sqlmap which you can read more about. And I also referenced BCrypt multiple times. There are good reads on BCrypt and hashing passwords in 2016.