Journeys in understanding WebSec and hacking my way through it