Did you know Cybrary has FREE video training? Join more than 2,500,000 IT and cyber security professionals, students, career changers, and more, growing their careers on Cybrary.
Video Description
This lesson gives participants a demonstration of unrestricted file upload. Basically, these files can execute any command and then show up on a web server. The code is placed in a PHP file and uploaded using the Burp Suite interceptor to see where a file is positioned on a web server.
Course Modules
Secure Coding
Module 01 OWASP Top 10 A1 Injection
Module 02 OWASP Top 10 A2 Broken Authentication and Session Management
Module 03 OWASP Top 10 A3 Cross-site Scripting
Module 04 OWASP Top 10 A4 Insecure Direct Object Reference
Module 05 OWASP Top 10 A5 Security Misconfiguration
Module 06 OWASP Top 10 A6 Sensitive Data Exposure
Module 07 OWASP Top 10 A7 Missing Function Level Access Control
Module 08 OWASP Top 10 A8 Cross-site Request Forgery
Module 09 OWASP Top 10 A9 Using Components with Known Vulns
Module 10 OWASP Top 10 A10 Unvalidated Redirects and Forwards
Module 11 CWE SANS Top 25 Buffer Overflows
Module 12 CWE SANS Top 25 Insecure Interaction Between Components
Module 13 CWE SANS Top 25 Risky Resource Management
Module 14 CWE SANS Top 25 Porous Defenses
Module 15 Honorable Mentions
Module 16 Active Defenses
Module 17 Threat Modeling
Instructed By
Sunny Wear
Instructor