Hackers-Arise

01 Introduction to Web App Hacking v8

02 Anatomy of a Modern Web Application

03 HTTP Methods

04 Introduction to the NovaStore Lab Environment

05 LAB 01 A02 Security Misconfiguration

06 URLs and Parameters

07 LAB 02 NovaStore: Weak and Missing Security Headers

08 LAB 03 NovaStore: SQL Injection in the Product Search

09 A Professional Testing Workflow (WSTG)

10 Authentication vs Authorization

11 Passwords Policies and Credential Attacks

12 LAB 04 NovaStore: Reflected XSS in the Search Banner

13 LAB 05 NovaStore: Stored XSS in Product Reviews

14 Session Fixation and Hijacking

15 LAB 6 and 7 IDOR, BOLA and Broken Access Control: Unauthorized Access to the Admin Panel

16 Injection Fundamentals

17 Advanced Injection Concepts and Automation

18 OS Command Injection and Local File Inclusion

19 Remote FIle Inclusion, SSRF and XSS

20 The Browser Security Model, SOP, CORS, CSP and SSC

21 LAB 8 Path Traversal: Unauthorized File Access Part I

22 LAB 8 Path Traversal: Unauthorized File Access Part II

23 LAB 9 OS Command Injection

24 Prototype Pollution

25 LAB 10 Authentication Failures:

Container Lab

Slides

Student Booklet

Tool Reference Manual

Vulnerability Catalog

A Note About These Lessons

26 Resources for Reconnaissance

27 WordPress Vulnerabilities

28 WPScan

29 Enumeration Using Nmap

30 Dictionary Attacks

31 Burp Suite Part I

32 Burp Suite Part II

33 Real World Case

34 CP, OWASP DirBuster

35 OWASP ZAP

36 Real World Case

37 ParamSpider

38 DB Browser Part I

39 DB Browser Part II

40 Juice Shop Part I

41 Juice Shop Part II

42 Juice Shop Part III

43 Juice Shop Part IV

44 Juice Shop Part V

45 Juice Shop Part VI

46 Juice Shop Part VII

47 Juice Shop Part VIII

48 Juice Shop Part IX