Web Security, Examples

Useful tools

• Different encoding and decoding functions useful to understand data flow.

Discovering an unknown web site

• (24.04.2012) Discover all the details about a web server

Protocols

• (8.05.2012) Hyper Text Transfer Protocol

A vulnerable application

• (22.05.2012) Guestbook application will be used for most of the examples and exercises.
• (22.05.2012) Examples of security problems with the guestbook application

Cross Site Scripting

• (22.05.2012) Cross Site Scripting - XSS what can be achieved with a little help of javascript!

Cross Site Request Forgery

• (5.06.2012) A real example using a POST request

Injection Flows

• (12.06.2012) SQL Injection
• (19.06.2012) Shell Injection (Source)