Web application Penetration testing & Security

Explore how the same origin policy restricts JavaScript access across origins, requiring matching protocol, hostname, and port to block cross-domain reads and defend web applications.

discover how http cookies support session management and shopping carts, how the browser stores them, and how domain, subdomain, host only flag govern cookie behavior.

Explore how cross-origin resource sharing enables controlled access across domains. See how the same-origin policy restricts cross-domain requests and how browser and API security rely on CORS policies.

Configure a local web application proxy, intercept and modify browser requests, crawl sites with spider, analyze requests and responses, and extend Burp Suite with tools like intruder for testing.

Perform active dns analysis to enumerate subdomains and map a domain, collecting subdomain names with IP addresses using a dns enumeration tool.

Explore Metasploit for web application attacks to fingerprint servers, enumerate directories with brute force, identify local file inclusions, and automate scans using modules and plugins.

Learn to brute-force web applications to uncover directories, files, and resources using wordlists and forced browsing, configure targets and authentication, and perform penetration testing during client engagements.

Shodan is a search engine for hackers that catalogs internet-connected devices, revealing IP addresses and locations of web servers and other internet of things, and highlighting vulnerabilities.

Discover how to use Maltego CE for information gathering and footprinting, mapping domains, subdomains, and associated IPs with a graphical network view to assess the attack surface.

Explore cross-site scripting basics, showing how unsanitized input reflected in web pages enables JavaScript injections that steal cookies and compromise sites. Identify the three XSS types.

Master reflected XSS by injecting payloads into input fields and watching the victim's browser execute reflected scripts. Analyze how encoding, filtering, and bypass techniques enable non-persistent attacks and cookie theft.

Understand persistent xss, a stored scripting attack where input payloads are saved in a database and later executed in other users' browsers.

Explore how the document object model enables client-side scripting and dom-based xss when user input is reflected on the page, and learn safe handling by using text content for output.

Explore how cross-site scripting enables website defacement and learn to test for persistent xss vulnerabilities through crafted payloads and input validation flaws, then apply secure coding practices.

examine xss vulnerabilities in php, asp, and js code and demonstrate secure input validation, output encoding, and filtering to prevent scripting attacks in web applications.

Explore how cross-site scripting enables cookie theft via javascript, using document.cookie to hijack sessions and login without credentials, and discuss exploiting forum links to lure victims.

Explore advanced cross-site scripting and phishing techniques to manipulate input forms, capture credentials, and demonstrate how malicious scripts persist on vulnerable web applications.

Demonstrate advanced cross-site scripting with BeEF to hook victims' browsers, perform browser-based exploits, and illustrate phishing and credential harvesting on Facebook, Google, and YouTube.

Explore web application testing methodologies and xss attacks by configuring proxy interception, defining scope, and using intruder and decoder to craft and test payloads.

Explore how SQL injection exploits unsanitized input to bypass authentication and expose data via GET, POST, or cookie parameters, and learn how input validation prevents it.

Exploiting SQL injections can compromise web databases, enabling attackers to read file systems, execute system-level commands, and dump sensitive data.

Learn how in-band sql injection attacks, including error-based and union-based techniques, expose database tables, columns, user data, and passwords, enabling attacker access and server takeover.

Explore blind sql injection attack techniques, including boolean-based and time-based methods, to infer database usernames and table names without direct data transfer.

Exploit sql injection using sqlmap to assess web applications, enumerate databases, tables, and users, and crack passwords to understand database security and defense gaps.

Explore fuzzing techniques to uncover SQL injection vulnerabilities using Burp Intruder, configuring Burp Suite proxy, intercepting requests, and injecting payloads into target input parameters.

Explore CSRF and XSRF attack methods and how attackers exploit authenticated sessions using forged requests and tokens to perform actions like password changes.

Explore how anti-csrf tokens protect user sessions by using unique, cryptographic values, hidden form fields, and server-side validation, while examining access control and same-origin policies to prevent token theft.

Explore how http parameter pollution (hpp) allows multiple parameters with the same name or different values to bypass checks, test security rules, and observe server handling.

Discover how client-side security controls can be bypassed by manipulating input fields, disabled attributes, and JavaScript checks. Learn to inspect elements and understand the limitations of client-side access controls.

Explore local and remote file inclusion attacks, how unsanitized inputs trigger system-level commands, and practical testing to identify misconfigurations and read sensitive files.

Examine how a site's file upload that restricts content types can be bypassed using an intercepting proxy, enabling upload of various image and non-image files and payloads to test security.

Explore XML documents and databases using ex-MIL, including elements, attributes, DTDs, and internal versus external DTD, while examining injection vulnerabilities from unsanitized input.

Explore xxe attacks in action, revealing how external entity injections exploit xml parsers to access server data via external and internal dtds. Learn practical demonstrations and testing with intercepting proxies.