Server Side Request Forgery (SSRF) tricks your own server into fetching malicious URLs — leaking cloud credentials, exposing internal services, and bypassing firewalls entirely. This guide walks through a real vulnerable Python app, explains every attack vector including DNS rebinding, and builds a production-ready fix with six layers of defense.
Development
JSON vs JSONC vs JSON5: The Complete Guide for Devs
JSON, JSONC, and JSON5 look almost identical but break in completely different ways. This guide covers the real grammar constraints, parser compatibility traps, trailing-comma gotchas, and a decision framework to pick the right format for APIs, configs, and CI pipelines.
A step-by-step guide to building a simple RAG system in Python
Build a small, practical Retrieval-Augmented Generation (RAG) system in Python: chunk your docs, embed them, store vectors in Chroma, retrieve top matches, and have an LLM answer using only that context. Includes a runnable example and common pitfalls.
Add Memory to AI Agent: Python Tutorial for Beginners
Discover how to add memory to AI agent systems using pure Python—no frameworks required. This hands-on tutorial walks you through building short-term conversation tracking and long-term persistent storage, transforming stateless chatbots into context-aware assistants that actually remember your conversations and preferences across sessions.
Model Context Protocol For Beginners: Superpower of AI Agents
Model Context Protocol (MCP) is Anthropic’s open standard that lets AI agents securely access your tools, databases, and APIs. Think of it as USB-C for AI—one universal protocol connecting language models to everything they need to actually get work done in your environment.
