Web Application Firewall Evasion CTF Walkthrough

Course Lessons

1. 1- What is Blind XSS & How Hackers Use it to Steal Your Browser Cookies?
2. 2- How Can Stored XSS Vulnerability Lead to Cookie Stealing? Practical Training Scenario
3. 3- Local File Inclusion & Log Poisoning Explained CTF Walkthrough
4. 4- Session ID Hijacking With Python OverTheWire Natas 18-19
5. 5- Using Burp Suite for Session Hijacking OverTheWire Natas Level 17-18
6. 6- Time Based SQL Injection OverTheWire Natas Level 16-17
7. 7- Bypassing SQL Filters Using Command Substitution OverTheWire Natas Level 15-16
8. 8- Blind SQL Injection With Python OverTheWire Natas Level 15
9. 9- SQL Injection Bypassing Double Quotes OverTheWire Natas Level 14
10. 10- File Upload Vulnerabilities P12 OverTheWire Natas 13
11. 11- File Upload Vulnerabilities P11 OverTheWire Natas Level 12-13
12. 12- PHP Session Hijacking With XOR Encryption OverTheWire War Games Natas Level 11
13. 13- Intro to Web Application Security TryHackMe Introduction to Cyber Security Path
14. 14- Understanding The Bypass Of File Upload Extension Filters P10 TryHackMe Opacity
15. 15- Demonstrating XSS,RCE and PostgreSQL Exploitation CTF Walkthrough
16. 16- Docker Privilege Escalation and SSTI Exploitation CTF Walkthrough
17. 17- PHP Static-Eval Exploitation CTF Walkthrough
18. 18- Python Pickle Exploitation CTF Walkthrough
19. 19- Fuzzing Web Applications with Wfuzz CTF Walkthrough
20. 20- IFrame and HTML Injection TryHackMe MD2PDF
21. 21- OWASP Top 10 API Vulnerabilities Explained Part Four TryHackMe
22. 22- OWASP Top 10 API Vulnerabilities Explained Part 3 TryHackMe
23. 23- OWASP TOP 10 API Vulnerabilities Explained Part Two TryHackMe
24. 24- Server Side Request Forgery Simple Demonstration TryHackMe Surf
25. 25- Web Application Firewall Evasion CTF Walkthrough
26. 26- Broken Authentication OWASP Top 10 TryHackMe Overpass
27. 27- Complete Guide to BurpSuite Intruder TryHackMe Junior Penetration Tester
28. 28- Command Injection Vulnerability Explained TryHackMe Junior Penetration Tester
29. 29- Cross Site Scripting XSS Explained TryHackMe Junior Penetration Tester OSCP
30. 30- SQL Injection Vulnerability Explained TryHackMe Junior Penetration Tester OSCP
31. 31- File Inclusion Vulnerability Explained TryHackMe Junior Penetration Tester OSCP
32. 32- Web Application Content Enumeration TryHackMe Content Discovery
33. 33- Insecure Direct Object Reference Vulnerability Explained (IDOR) TryHackMe IDOR
34. 34- Server Side Template Injection Vulnerability Explained TryHackMe SSTI
35. 35- Basic Penetration Testing Tools TryHackMe ToolsRus
36. 36- Understanding Insecure Direct Object Reference Vulnerability TryHackMe ZTH: Web 2
37. 37- Understanding SSRF : Server Side Request Forgery Vulnerability TryHackMe
38. 38- XXE and JSON Web Tokens Vulnerabilities TryHackMe ZTH: Obscure Web Vulns
39. 39- Understanding JSON Web Token Vulnerabilities TryHackMe
40. 40- Understanding Server Side Template Injection TryHackMe
41. 41- Demonstrating Cross Site Scripting Filter Bypass Techniques TryHackMe
42. 42- XML External Entity Vulnerability To SSH Shell TryHackMe
43. 43- Security Testing Techniques For Authentication Mechanisms TryHackMe
44. 44- Understanding Local File Inclusion Vulnerability TryHackmMe LFI
45. 45- Web Application Vulnerability Scanning with OWASP ZAP TryHackMe
46. 46- CGI and Tomcat Security Testing with Metasploit Advent of Cyber
47. 47- Anatomy and Analysis of SQL Injection TryHackMe Advent of Cyber
48. 48- Understanding Fuzzing in Cybersecurity TryHackMe Advent of Cyber
49. 49- Re-Visiting File Upload Vulnerabilities P8 TryHackMe Advent of Cyber
50. 50- Understanding Cookies Security TryHackMe Advent of Cyber
51. 51- Local File Inclusion in Node.js TryHackMe Advent of Cyber 1 Day 15
52. 52- Bypassing Server Side Upload Filters P6 Upload Vulnerabilities TryHackMe
53. 53- Exposing Sensitive Data and Viewing other users shopping carts - OWASP Juice Shop TyHackMe
54. 54- Broken Authentication and SQL Injection OWASP Juice Shop TryHackMe
55. 55- Analyzing Logs and Exploiting PHP Book Store - TryHackMe OWASP Top 10
56. 56- Explaining Insecure Deserialization Vulnerability - COMPTIA Pentest+ TryHackMe OWASP
57. 57- Finding Users Cookies with Reflective Cross Site Scripting - TryHackMe COMPTIA Pentest+ Pathway
58. 58- Grabbing Cookies With Stored Cross Site Scripting (Testing Scenario ) - TryHackMe
59. 59- Finding Security Misconfigurations in a Website - COMPTIA Pentest+ TryHackMe OWASP Top 10
60. 60- Explaining XML vulnerabilities [Owasp] - COMPTIA Pentest+ Course Preparation TryHackMe
61. 61- Finding Sensitive Data in a Website - COMPTIA Pentest+ TryHackMe OWASP
62. 62- Command Injection Vulnerability Explained TryHackMe OWASP TOP 10 Walkthrough
63. 63- Demonstrating PHP Filters Bypass For Local File Inclusion - TryHackMe DogCat
64. 64- Demonstrating Web Application Vulnerabilities - Cyberseclabs Shock
65. 65- Testing For SQL Injection Database Vulnerability in search fields - bWAPP
66. 66- Penetration testing series - Part10: Cyberseclabs CMS walkthrough
67. 67- Penetration Testing Series - Part9: Testing For PHP Command Injection
68. 68- Penetration Testing Series - Part:7 - OS Command Injection
69. 69- bWAPP - Part 5: Mail Header Injection
70. 70- bWAPP - Part 3: IFrame Injection
71. 71- BWAPP - Part 2 : HTML Injection
72. 72- Ultimate Guide to Manual SQL Injection Testing and Training
73. 73- From Local File Inclusion to Remote Shell OSCP Video Course Prep
74. 74- Fingerprinting and Detecting Web Application Firewalls
75. 75- XML External Entity Injection [113] - OWASP
76. 76- OWASP Directory Traversal - Sunrise Vulnhub Walkthrough
77. 77- OWASP CSRF Vulnerability Code Review [26]
78. 78- SQL and XSS Vulnerability Code Review [25]
79. 79- Reflected Cross Site Scripting PHP Code Review [24]
80. 80- PHP command Injection Vulnerability Code review [23]
81. 81- SQL Injection PHP Code Review [22]
82. 82- Practical Web Application Pentesting - Red Team Training - Nezuko CTF vulnhub
83. 83- OWASP Local File Inclusion Vulnerability - Prime 1 Vulnhub CTF Walkthrough
84. 84- BsidesTLV 2018 Vulnhub CTF Walkthrough - IH8emacs
85. 85- BsidesTLV 2018 CTF Vulnhub Walkthrough - Redirect Me
86. 86- Insecure Direct Object Reference Vulnerability - OWASP
87. 87- Cookie Security Explained OWASP Top 10
88. 88- OWASP Stored XSS - Practical Approach - Penetration Testing and Cybersecurity Training
89. 89- Practical Reflected XSS - Owasp Cross Site Scripting
90. 90- HTML Forms Injection Explained EP1 OWASP Hackademic Challenge 10
91. 91- Practical Command Injection with Burp Suite EP2 OWASP Hackademic Challenge 008
92. 92- Directory Traversal With Burp Suite EP1 OWASP Hackademic Challenge 007
93. 93- Playing with Javescript Functions OWASP Hackademic Challenge 006
94. 94- User Agent Spoofing Explained EP1 OWASP Hackademic Challenge 5
95. 95- Practical Encoded Reflected XSS EP3 OWASP Hackademic Challenge 004
96. 96- Reflected Cross Site Scripting EP2 OWASP Hackademic Challenge 003
97. 97- Playing with Javascript Methods OWASP Hackademic Challenge 002
98. 98- Directory Browsing Vulenrability and Spidering Explained OWASP Hackademic Challenge 001
99. 99- XPATH Injection Vulnerability Explained OWASP WebGoat
100. 100- Session Fixation Attack Explained OWASP WebGoat
101. 101- Client-side Validation (CSV) Bypass Explained OWASP WebGoat
102. 102- XML External Entity Injection Explained EP1 OWASP WebGoat
103. 103- String SQL Injection Vulnerability Explained EP3 OWASP WebGoat
104. 104- Numeric SQL Injection Vulnerability Explained EP2 OWASP Webgoat Lab
105. 105- SQL Injection Vulnerability Explained EP1 OWASP WebGoat Lab
106. 106- Command Injection Vulnerability Explained EP1 Mutillidae OWASP Lab
107. 107- Cross Site Request Forgery CSRF Vulnerability Explained EP1 DVWA Lab
108. 108- Reflected Cross Site Scripting Vulnerability Explained EP1 Mutillidae OWASP Lab
109. 109- Stored Cross Site Scripting XSS Vulnerability Explained EP2 Mutillidae Lab
110. 110- Insecure Direct Object Reference Vulnerability Explained EP1 Mutillidae OWASP Lab
111. 111- Local File Inclusion Vulnerability Explained EP1 Mutillidae OWASP Lab
112. 112- Unrestricted File Upload Vulnerability P1 Mutillidae OWASP Lab