Web Application Security Testing Essential Training

Explore how sql injection exploits a vulnerable app to enumerate information_schema databases, reveal table and column details, and expose user credentials and admin data.

Explore HTML injection and its reflected variant in web applications, and learn how injection can affect user accounts and page content.

Explore iframe injection vulnerabilities in web applications and how unauthorized downloads and automatic execution can occur. Learn defensive testing techniques to identify and mitigate these exploits.

Explore ssi injection in a Debian-like environment through a hands-on demo, examining file system access, permissions, and potential command-related risks.

Demonstrate broken authentication and session management by illustrating password attacks, login attempts, and how intruders leverage payloads and intercepted credentials, including admin accounts.

Learn how cross-site scripting vulnerabilities occur when web applications fail to filter user input, enabling injection of malicious JavaScript via unfiltered fields, leading to reflective and stored XSS attacks.

Explore insecure direct object references and how altering request parameters can expose secrets, bypass login, and enable unauthorized ticket purchases.

Identify how security misconfiguration across web app components leaves systems exposed even with default configurations, and learn to detect risks with Kali or BackTrack scans.

Examine how sensitive data exposure happens in web apps, decode base64 encoded cookies, and observe demos on login data, passwords, and data leakage risks in debugging scenarios.

explores using external component libraries, recognizing risks of known vulnerabilities, and testing to expose and mitigate security weaknesses in web applications.