CyberTap logoCyberTapby Cert Tap
← Ethical Hacking

Ethical Hacking · 5 min

Web Applications

Where the pieces sit — and why that matters for security

This lesson explains the concept, then checks your understanding in a short interactive exercise.

Basic architecture

Most web applications share a similar shape: a browser (frontend) that users interact with, a backend server that handles logic, an API that connects them, and a database that stores data.

  • Browser — renders the interface, runs frontend code
  • Backend / API — processes requests, applies rules
  • Database — stores and retrieves data

Authentication and sessions

Authentication confirms who a user is. Once confirmed, a session lets the app remember that identity across multiple requests, usually via a token or cookie.

  • Sessions must be protected from theft or reuse
  • Expiring sessions limits damage if one is stolen

Loading the interactive lesson…