JavaScript Files Are Your Friends in Bug Bounty Hunting
Discover hidden endpoints and vulnerabilities by diving deep into JavaScript files. Learn techniques to uncover potential bugs and enhance your bug bounty hunting skills.
Identifying Your Web Attack Surface - RAWR
Learn to identify and assess web application vulnerabilities using the RAWR methodology, enhancing your ability to secure online systems and protect against potential threats.
Max Level Web App Security - Attacks, Exploits, and Response Strategies
Explore web app security through attack analysis, incident response, and backdoor detection. Learn practical techniques for monitoring, cleanup, and understanding attacker motivations.
Applying Risk Management to Web Application Security
Explore effective risk management strategies for web application security, focusing on practical techniques to identify, assess, and mitigate potential vulnerabilities in online systems.
Web Pen-Testing Workshop - JSON Injection - Part 12
Explore JSON injection techniques in web penetration testing with expert Jeremy Druin. Learn to identify and exploit vulnerabilities in web applications handling JSON data.
Web Penetration Testing Workshop: XSS and BeEF - Part 10 of 12
Explore XSS vulnerabilities and BeEF framework for web penetration testing, enhancing your cybersecurity skills with hands-on techniques and expert insights.
Web Penetration Testing: Remote and Local File Inclusion - Part 6 of 12
Explore remote and local file inclusion vulnerabilities in web applications, learning detection techniques and exploitation methods for enhanced security awareness.
NOWASP Mutillidae 2: A Web Penetration Testing Environment for Secure Development
Explore web penetration testing techniques using NOWASP Mutillidae 2, a comprehensive environment for learning secure development practices and identifying vulnerabilities.
Pen Testing Web 2.0 - The Client Side - Lecture
Learn advanced techniques for penetration testing Web 2.0 applications, focusing on client-side vulnerabilities and exploits to enhance your cybersecurity skills.
Hunting for Amazon Cognito Security Misconfigurations
Explore Amazon Cognito security misconfigurations, learn testing techniques for audits and bug bounty hunting, and discover mitigation strategies through a real-world account takeover case study.
Hacking Web Applications - Attacking Authentication
Learn techniques for attacking authentication in web applications through live demonstrations and practical examples.
Web App Wednesday - Exciting XXE Injection
Explore XXE injection techniques for web application security, covering PortSwigger labs and practical hacking scenarios.
The Rise and Fall of ModSecurity and the OWASP Core Rule Set
Explore the evolution and impact of ModSecurity and OWASP Core Rule Set in web application security, examining their rise, challenges, and future prospects.
What Can Traditional Web App Security Learn From Browser Wallet Extensions?
Explore innovative security insights from browser wallet extensions, offering fresh perspectives to enhance traditional web application protection strategies.
Exploiting Jenkins CVE-2024-23897 - Remote Code Execution Step-by-Step Tutorial
Learn to replicate Jenkins Remote Code Execution vulnerability CVE-2024-23897. Set up Vulhub, use Nuclei template, and exploit the flaw step-by-step for educational purposes in cybersecurity.
Authelia - Open Source, Self Hosted Authorization and Authentication for Your Web Applications
Secure your self-hosted web apps with Authelia, an open-source authentication and authorization solution. Learn installation, configuration, and integration with NGinX Proxy Manager for enhanced security.
Automating TLS Configuration Verification for Web Application Data Stores
Explore best practices for TLS configuration in web application data stores, focusing on MySQL, PostgreSQL, and MongoDB. Learn about tools for verifying proper server setup and survey real-world implementations.
Unicode: The Hero or Villain? Input Validation of Free-Form Unicode Text in Web Applications
Explore Unicode's complexities in web application input validation, debunking myths and showcasing its potential as a powerful tool for robust security measures in multi-language text fields.
Predicting Random Numbers in Ethereum Smart Contracts
Explore vulnerabilities in random number generation for Ethereum smart contracts, focusing on gambling applications. Learn to identify and build secure RNGs within blockchain limitations.
NoSQL Is Not NoVulnerable - Exploring Security Risks in NoSQL Databases
Explores vulnerabilities in NoSQL databases, comparing threats to traditional SQL systems and demonstrating new attacks exploiting complex data types like JSON to bypass application-level access controls.
MultiJuicer - Open-Source Tooling for Web Application Security Trainings on Kubernetes
Explore MultiJuicer, an open-source tool for conducting web application security trainings on Kubernetes. Learn how to enhance your cybersecurity skills and implement effective training programs.