Web App Pentesting - HTTP Cookies and Sessions
Explore HTTP cookies and session IDs in web app security, learning their purposes and potential vulnerabilities for more effective penetration testing.
Web App Pentesting - URL Structure
Comprehensive overview of URL components, structure, and security implications for web applications. Covers absolute vs relative URLs and their impact on website security.
Web App Pentesting - HTTP Headers and Methods
Explore HTTP headers, methods, and potential vulnerabilities in web applications. Learn how to identify and exploit security weaknesses, focusing on the PUT method abuse.
Web App Penetration Testing - Introduction to HTTP
Comprehensive introduction to HTTP protocol, requests, responses, methods, and headers for web app penetration testing. Gain essential knowledge for effective security assessments.
Fuzzing & Directory Brute-Force With ffuf
Learn to perform fuzzing, enumeration, and directory brute-forcing using ffuf, a fast web fuzzer. Discover techniques for directory discovery, virtual host detection, and parameter fuzzing to enhance your web security testing skills.
How to Secure phpMyAdmin
Comprehensive guide to configuring and securing phpMyAdmin, a web-based GUI for MySQL databases. Learn best practices for enhancing security and protecting your database management system.
ASP.NET Core Admin Panel - Implementing User Management and Email Invitations - Tricking Library Episode 60
Implement an admin panel for inviting moderators using ASP.NET Core, Identity, and SendGrid. Learn to set up email services, create users, and manage roles securely.
Intermediate ASP.NET Core - Policy Authorization and Service Access - Episode 32
Learn to implement policy-based authorization in ASP.NET Core, set up policies from claims, authorize controllers, and access dependency injection services for enhanced application security.
How to Use ZAP and ZAP HUD for Web Application Testing - LevelUp 0x04
Learn to use ZAP for web app testing and explore its new Heads Up Display feature, bringing powerful functionality directly into your browser for enhanced security analysis.
Turbo Intruder: Abusing HTTP Misfeatures to Accelerate Web Application Attacks
Explore advanced HTTP exploitation techniques using Turbo Intruder, a high-speed Burp extension for automated web application attacks, with insights on payload generation and response analysis.
GraphQL CTF and XSS Challenge Walkthrough - Hacker101 and Bug Bounty Notes
Explore GraphQL CTF challenges and XSS vulnerabilities in this hands-on session. Learn practical hacking techniques and improve your bug bounty hunting skills.
How to Use WPScan - A Walkthrough with the Author
Comprehensive walkthrough on using WPScan for WordPress security assessment, featuring insights from the tool's creator ethicalhack3r during a Live Recon episode.
Burp Suite Pro Features and Walkthrough
Explore advanced features of Burp Suite Pro for ethical hacking and web application security testing. Learn powerful tools to enhance your penetration testing skills.
Build, Break, and Hack WebSockets
Explore WebSocket vulnerabilities and exploitation techniques, covering injection attacks and cross-site issues. Learn to build, break, and secure real-time web communications.
Web Application Hacking - File Upload Attacks Explained
Learn to exploit file upload vulnerabilities in web applications, including path traversal attacks and chaining multiple vulnerabilities for maximum impact.
How to Shot Web: Successful Tactics and Tools for Bug Hunting
Explore successful tactics, tools, and methodologies used by top bug hunters to improve your web and mobile app hacking skills for claiming bug bounties.
How to Achieve Comprehensive Protection for Cloud Native Applications and Workloads
Learn comprehensive protection strategies for cloud-native applications, covering web security, runtime risks, and predictive models. Explore practical solutions and benefits through demos and real-world examples.
AuthMatrix - Simplified Authorization Testing for Web Applications
Simplified authorization testing for web apps using AuthMatrix, a Burp Suite extension. Learn common insecurity patterns, mapping techniques, and effective testing methods for access control vulnerabilities.
PHP Security Redefined - AppSecUSA 2015
Explore PHP's security evolution, best practices, and tools for safer application development, with insights on PHP 7's improvements and community-driven security initiatives.
A New Ontology of Unwanted Web Automation
Explores a new ontology for classifying automated threats to web applications, focusing on misuse of valid functionality and its impacts on security and privacy.
Game of Hacks - The Mother of All Honeypots
Explore real-time hacker adaptations to web app security measures through an interactive honeypot experiment. Learn valuable insights for strengthening enterprise applications against evolving threats.