50 cards
This deck walks you through the core ideas behind modern software security, with a strong focus on web application threats and defenses. You'll encounter questions about common vulnerability classes like cross-site scripting, SQL injection, and cross-site request forgery, along with the protective techniques developers use to counter them, such as parameterized queries and input sanitization. Beyond attack patterns, the cards also cover foundational concepts like authentication versus authorization, OAuth 2.0 flows, JWTs, and how HTTPS and TLS certificate chains establish trust on the web.
The deck is well suited for anyone learning or reviewing application security fundamentals, whether you're a student, a developer aiming to write more secure code, or someone preparing for a technical interview that touches on security topics. If you're newer to the subject, the cards can serve as a structured overview of the landscape; if you already have some experience, they're a handy way to refresh terminology and make sure you can articulate each concept clearly.
To get the most out of these flashcards, try to think about the "why" behind each term, not just the definition. When a card mentions a vulnerability, ask yourself how a defender would recognize or prevent it. Spacing your review across several short sessions rather than cramming will help these concepts move into long-term memory, and pairing the cards with a small hands-on exercise, like spotting an XSS pattern in sample code, can make the material stick much more effectively.