Warm up
  • Introduction
  • Disclaimer
  • Methodology
Environment setup
  • In this section
  • Download resources
  • Setting up the target
  • Setting up Kali
  • Setting up the Burp Suite
Web 101
  • In this section
  • How HTTP works
  • Static HTML
  • PHP and friends
  • Modern MVC frameworks
  • Javascript
Application discovery
  • Manual discovery
  • Automated discovery
Attacking session management
  • Session management intro
  • Session fixation
  • Weak logout
  • Same origin policy
  • CSRF
  • Securing the session
Attacking authentication
  • SSL/TLS
  • Authentication bypass
  • Unauthenticated URL access
  • Password quality
  • Password brute force
  • Default accounts
  • Weak password recovery
  • Mitigations
Attacking authorization
  • Authorization Intro
  • Manipulating variables
  • Client side authentication
  • Mitigations
Attacking the client
  • Reflected XSS
  • Stored XSS
  • HTTP header injection
  • Malicious URL redirection
  • Exploiting wrong content-type
  • Mitigations
Server side injections
  • Malicious file upload
  • LFI and RFI
  • OS command injection
  • SQL injection
  • UNION Select Attack
  • Blind SQL injection
  • Automating SQLi testing
  • Mitigations
The rest
  • Reporting
  • Checklist
  • Checklist download
  • What's next