Did you know Cybrary's video training is FREE? Join more than 2,500,000 IT and cyber security professionals, students, career changers, and more, growing their careers on Cybrary.
Video Description
This lesson offers participants step by step instructions in using multilidea to discover vulnerabilities through a demo of a command injection. Using a chain of commands, programmers can discover which files are on a web server and see the source code of a PHP file.
Course Modules
Secure Coding
Module 01 OWASP Top 10 A1 Injection
Module 02 OWASP Top 10 A2 Broken Authentication and Session Management
Module 03 OWASP Top 10 A3 Cross-site Scripting
Module 04 OWASP Top 10 A4 Insecure Direct Object Reference
Module 05 OWASP Top 10 A5 Security Misconfiguration
Module 06 OWASP Top 10 A6 Sensitive Data Exposure
Module 07 OWASP Top 10 A7 Missing Function Level Access Control
Module 08 OWASP Top 10 A8 Cross-site Request Forgery
Module 09 OWASP Top 10 A9 Using Components with Known Vulns
Module 10 OWASP Top 10 A10 Unvalidated Redirects and Forwards
Module 11 CWE SANS Top 25 Buffer Overflows
Module 12 CWE SANS Top 25 Insecure Interaction Between Components
Module 13 CWE SANS Top 25 Risky Resource Management
Module 14 CWE SANS Top 25 Porous Defenses
Module 15 Honorable Mentions
Module 16 Active Defenses
Module 17 Threat Modeling
Instructed By
Sunny Wear
Instructor