Course Introduction
Introduction
Lab Setup
SQL Injection
-
Introduction to SQL Injection (3:01)
-
Authentication Bypass using SQLi - Payload 1 (3:24)
-
Authentication Bypass using SQLi - Payload 2 (1:44)
-
Exploiting SQL Injection, manual way - Part 1 (1:35)
-
Exploiting SQL Injection, manual way - Part 2 (17:55)
-
A word about Blind SQLi and Introduction to SQLMap (7:59)
-
Exploiting SQL Injection using SQLMap (4:41)
-
SQL Injection Prevention (3:00)
Same Origin Policy
Cross Site Scripting
Cross Site Request Forgery (CSRF)
XML Vulnerabilities
Access Control Issues
File Upload Vulnerabilities
Platform Misconfigurations
Improper Error Handling
Java Deserialization
-
Introduction to Java Deserialization (4:28)
-
The vulnerable application (3:04)
-
Identifying the use of java serialization - Black Box Approach (4:08)
-
Identifying the use of java serialization - White Box Approach (4:23)
-
Identifying the use of java serialization - summary (0:53)
-
Custom Java Deserialization Exploitation leading to XSS (10:32)
-
Exploiting Java Deserialization using ysoserial (18:58)
-
Java Deserialization PoC using URLDNS (4:00)
-
Java Deserialization Prevention (0:53)
Broken Cryptography
Automated Vulnerability Scanning
