Bring App Security Class content into this repo

[coreyshuman]

Add documentation and resources from the application security class.

Topics:

• [ ] Introduction to Secure Software Development Cycle
• [ ] SQL Injection
• [ ] MongoDb Query Injection
• [x] Cross Site Scripting (XSS)
• [ ] Cross Site Request Forgery (CSRF)
• [ ] Session hijacking / session replay
• [ ] User Data Sanitization
• [ ] Cross-Origin Resource Sharing (CORS)
• [ ] Content Security Policy (CSP)
• [ ] Passwords and Validation
• [ ] Authorization (tokens, cookies, etc)
• [ ] Authentication (User roles and permissions)
• [ ] Cryptography (Encryption, Hashing, etc)
• [ ] Error Handling
• [ ] Auditing and Logging
• [ ] Setting up SSL
• [ ] Handling Sensitive Data

Tools:

• [ ] Kali Linux
  • WPScan
  • nmap
• [ ] Wireshark
• [ ] Postman
• [ ] Postico