Appsec TLDR

YouTube·DerbyCon

Explore application security fundamentals in this 43-minute DerbyCon conference talk. Dive into web browser mechanics, HTTP requests, and URL structures. Learn to set up browser proxies, understand cookies, and analyze HTML responses. Adopt an attacker's mindset by identifying threats and objectives. Discover tips for addressing insufficient authentication and authorization, and explore common vulnerabilities like session hijacking, cross-site scripting (XSS), SQL injection, and cross-site request forgery (CSRF). Gain practical insights with examples, test strings, and attack scenarios to enhance your web application security knowledge.