Part 1 Intro | Cybrary

NEED TO TRAIN YOUR TEAM? LEARN MORE

Did you know Cybrary has FREE video training? Join more than 2,500,000 IT and cyber security professionals, students, career changers, and more, growing their careers on Cybrary.

Time

1 minute

Difficulty

Intermediate

Video Activity

This brief lesson introduces participants to the agenda of this module which will cover: Definition, Sample Code and Case study Demos: IDOR w/ files, IDOR with URLs, both show mitigation with tokenization Mitigations, countermeasures and ...

NEED TO TRAIN YOUR TEAM? LEARN MORE

Did you know Cybrary has FREE video training? Join more than 2,500,000 IT and cyber security professionals, students, career changers, and more, growing their careers on Cybrary.

This brief lesson introduces participants to the agenda of this module which will cover: Definition, Sample Code and Case study Demos: IDOR w/ files, IDOR with URLs, both show mitigation with tokenization Mitigations, countermeasures and defenses Lab and lab solutions

Part 2 Lab Setup

Part 3 BurpSuite

Part 4 Mutillidae

Part 2 Explanations

Part 3 SQL Injection Demo

Part 4 Command Injection Demo

Part 5 JSON Injection Demo

Part 6 Defenses

Part 7 Lab Solution

Part 2 Explanations

Part 3 CookieManipulation Demo

Part 4 Username Enum Demo

Part 5 BruteForce Demo

Part 6 Defenses

Part 7 Lab Solution 1

Part 8 Lab Solutions 2

Part 9 Lab Solutions 3

Part 2 Explanations

Part 3 Reflected XSS HTML context Demo

Part 4 Reflected XSS JS context Demo

Part 5 Stored Demo

Part 6 Defenses

Part 7 Lab Solutions 1

Part 8 Lab Solutions 2

Part 2 Explanations

Part 3 IDOR files tokens Demo

Part 4 IDO urls tokens Demo

Part 5 Defenses

Part 6 Lab Solutions

Part 2 Explanations

Part 3 Dir Demo

Part 4 XXE Demo

Part 5 User Agent Demo

Part 6 Defenses

Part 7 Lab Solutions

Part 2 Explanations

Part 3 Comments Demo

Part 4 HiddenPages Demo

Part 5 HTMLS Web Storage Demo

Part 6 Defenses

Part 2 Explanations

Part 3 Role Demo

Part 4 Defenses

Part 5 Missing FL AC Lab

Part 2 Explanations

Part 3 CSRF JS Demo

Part 4 Entropy Demo

Part 5 CSRF Defenses

Part 6 CSRF Lab Solution

Part 2 Explanations

Part 3 Libraries & CVSS Demo

Part 4 Defenses

Part 5 WebGoat Library CVSS Lab

Part 2 Explanations

Part 3 Unvalidated URLs Demo

Part 4 Defenses

Part 5 JS redirect Lab

Part 2 Explanations

Part 3 Classic BufferOverflow Demo

Part 4 Defenses

Part 5 WebGoat BO OffByOne Lab

Part 2 Explanations

Part 3 FileUpload Demo

Part 4 Defenses

Part 5 WebGoat FileUpload Lab

Part 2 Explanations

Part 3 Risky Resource Mgmt Demo

Part 4 Defenses

Part 5 Lab Defenses

Part 2 Explanations

Part 3 JS Validation Bypass Demo

Part 4 Defenses

Part 5 HTTP Response Splitting Lab

Part 2 Explanations

Part 2 Explanations

Part 2 Explanations

Part 3 Card Game Demo