Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

A03: Injection

via CodeSignal

Go to class Write review

Overview

This course demonstrates how injection flaws occur when untrusted data is used to construct queries or commands, and how parameterization or input validation can mitigate these risks in our pastebin application.

Syllabus

  • Unit 1: Introduction to Injection Vulnerabilities
  • Unit 2: Query Parameter Injection
    • Executing Your First SQL Injection Attack
    • Reconnaissance Attack with UNION SELECT
    • Defending Against SQL Injection Attacks
    • Adding a Second Layer of Defense
    • Advanced Multi-Parameter Search with JOIN
  • Unit 3: Preventing XSS Injection
    • Exploiting XSS with Malicious Snippets
    • Sanitizing User Input with DOMPurify
    • Implementing Server Side Input Sanitization
    • Securing Comments with Client Side Sanitization
  • Unit 4: Preventing Command Injection
    • Securing File Processing from Command Injection
    • Exploiting and Preventing Command Injection Attacks
    • Adding Type Validation to Input Checks
    • Implementing Safe Path Construction and Validation
    • Securing Commands with Parameterized Execution
    • Restricting File Types with Extension Validation

Reviews

Start your review of A03: Injection

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.