Next week, NUS Greyhats‘ Amon and Kai Yuan (@amon and @thngkaiyuan on Slack) will cover Web
Exploitation 101 as part of the Greyhats Mission Control session. As
the basic foundation, they will be covering the application specific
standard attacks that are common to many web applications (but not
limited solely to web applications):
- SQL Injection
- Command Injection
- XSS
- CSRF
- Open Redirects
In addition, Greyhats may also delve into more exotic
platform-specific attacks, that are applicable to PHP, Rails, Python,
Java.
Ready? Here are the documents for MC #3: http://bit.ly/orbital16-offwebsec
You might also be interested in this links: http://qxcg.net/how-websites-are-broken-resources.html.
