Ethical Hacking: Web App Hacking

Identify how email addresses and usernames are exposed on websites and product reviews to facilitate login, including admin accounts, as part of ethical web app hacking practice.

Learn how SQL injection bypasses login by injecting payloads into input fields, exposing weak input validation, and demonstrating how attackers gain administrator access to a web app.

Learn brute force methods using common password lists and automation to test web logins. Observe network requests with browser tools and replicate login attempts using curl.

Explains how to brute force a web login using Python and a password list, capturing login requests with dev tools, iterating across passwords, and verifying successful authentication.

explore how to brute force a login with burp suite community edition by intercepting requests, sending password payloads from a list, and identifying success via status codes.

Learn how confidential data can be exposed when a web shop reveals public documents. Removing file extensions and names lets you browse all public files, risking acquisitions and user names.

explains broken access control by showing how missing authorization headers and manipulated user IDs in requests can grant access to other users' baskets.

Demonstrates cross-site scripting as a vulnerability that lets attackers run JavaScript in a web app, with examples in the search bar and iframe and notes on multiple XSS types.

Explore multiple web app attack types, view your progress on the scoreboard, and learn how performing attacks like brute force and sensitive data exposure reveals the app's status and capabilities.