Autoplay
Autocomplete
Dark Mode
Speed
Previous Lesson
Complete and Continue
Advanced Web Hacking
Welcome to the Course
Welcome to the Course (1:31)
How to get Support (1:32)
Prototype Pollution
Introduction (4:31)
Prerequisite Knowledge - Part 1 - Object Structures and Prototypes (26:44)
Prerequisite Knowledge - Part 2 - Deep and Shallow Copy (8:29)
Prerequisite Knowledge - Part 3 - Prototype Pollution and "__proto__" (14:22)
Prerequisite Knowledge - Part 4 - Methodology (5:49)
Lab Setup (7:51)
Client-Side Prototype Pollution (28:22)
Client-Side Prototype Pollution with DOM Invader (5:44)
Client-Side Prototype Pollution Challenge Introduction (1:23)
Client-Side Prototype Pollution Challenge Walkthrough (8:25)
Server-Side Prototype Pollution (28:56)
Server-Side Prototype Pollution with Scanners (8:02)
Prototype Pollution Reports (6:27)
Checking NPM Libraries for Known Prototype Pollution Vulnerabilities (4:58)
Finding Undiscovered Prototype Pollution in NPM Libraries (13:35)
Capstone Challenge Introduction (1:51)
Capstone Challenge Walkthrough (16:59)
Attacking GraphQL
Welcome to the Module (0:37)
What is GraphQL? (7:12)
Building a Simple GraphQL Application (19:48)
Recon: Finding GraphQL Endpoints (16:17)
Introspection (21:28)
Information Disclosure (14:31)
Information Disclosure Challenge Walkthrough (6:33)
Authentication and Access Control (18:13)
Authentication and Access Control Challenge Walkthrough (5:25)
Denial of Service (14:37)
Injection, CSRF, and Other Web Attacks (15:38)
Capstone Challenge (3:33)
Capstone Walkthrough (8:45)
Out-of-Band Attacks
Welcome to the Module (2:01)
Lab Setup (0:35)
DNS & HTTP Recap (3:10)
Introduction to Microservice Architecture (7:54)
Microservice Application Overview (6:00)
External Collectors (6:24)
Triggering Out-of-Band Requests (3:45)
Server-Side Request Forgery (SSRF) (22:11)
Challenge Walkthrough (13:57)
Finding Impact with OOB Attacks (14:26)
Getting Started with Code Review
Welcome to the Module (2:02)
Building Code Review Skills (5:31)
Code Review Roles (10:24)
Starting Checklist & Finding Real World Bugs (7:54)
Code Review Lab 1: Hidden Injection (30:43)
Code Review Lab 1 Part 2: Analysing Features (16:39)
Code Review Lab 2: Sinks to Sources (16:11)
Code Review Lab 3: Finding Logic Flaws (10:43)
Developing Your Skills Further (3:06)
Code Review Lab 3: Finding Logic Flaws
Lesson content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock