Overview
Syllabus
0 - Intro/Setup - Damn Vulnerable Web Application (DVWA)
1 - Brute Force (low/med/high) - Damn Vulnerable Web Application (DVWA)
2 - Command Injection (low/med/high) - Damn Vulnerable Web Application (DVWA)
3 - Cross Site Request Forgery (CSRF) (low/med/high) - Damn Vulnerable Web Application (DVWA)
4 - File Inclusion (LFI/RFI) (low/med/high) - Damn Vulnerable Web Application (DVWA)
5 - File Upload (low/med/high) - Damn Vulnerable Web Application (DVWA)
6 - Insecure Captcha (low/med/high) - Damn Vulnerable Web Application (DVWA)
7 - SQL Injection (low/med/high) - Damn Vulnerable Web Application (DVWA)
8 - Blind SQL Injection (low/med/high) - Damn Vulnerable Web Application (DVWA)
9 - Weak Session IDs (low/med/high) - Damn Vulnerable Web Application (DVWA)
10 - XSS (DOM) (low/med/high) - Damn Vulnerable Web Application (DVWA)
11 - XSS (Reflected) (low/med/high) - Damn Vulnerable Web Application (DVWA)
12 - XSS (Stored) (low/med/high) - Damn Vulnerable Web Application (DVWA)
13 - CSP Bypass (low/med/high) - Damn Vulnerable Web Application (DVWA)
14 - JavaScript (low/med/high) - Damn Vulnerable Web Application (DVWA)
15 - Authorisation Bypass (low/med/high) - Damn Vulnerable Web Application (DVWA)
16 - Open Redirect (low/med/high) - Damn Vulnerable Web Application (DVWA)
17 - Cryptography (low/med/high) - Damn Vulnerable Web Application (DVWA)
18 - API Security (low/med/high) - Damn Vulnerable Web Application (DVWA)
Taught by
CryptoCat