Injection

• SQL Injection (intro)
• SQL Injection (advanced)
• SQL Injection (mitigation)
• Path Traversal

WebGoat

• Introduction
• General
• Injection
• Broken Authentication
• Sensitive Data Exposure
• XML External Entities
• Broken Access Control
• Cross-Site Scripting
• Insecure Deserialization
• Vulnerable Components
• Request Forgeries
• Client Side
• Challenges

Home