Selected Vulnerabilities in Web Applications

on YouTube ↗44m

" summary

Examines selected web application vulnerabilities, including XXE and several non-obvious techniques for obtaining an OS shell. Each issue is introduced briefly with theory and then demonstrated live, using practical examples and exploits.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 1:50Code execution on network device
3. 8:03Upload filter bypass
4. 15:20JBoss library vulnerability
5. 23:30Blind SQL injection on device
6. 37:40XML external entities
7. 42:39Summary and Q&A

" related talks

• 45mOverview of Interesting Vulnerabilities in Web Applications - Live DemosMichał Sajdak · JDD 2025
• 50mModern WebApp VulnerabilitiesErlend Oftedal · Øredev 2019
• 01h 30mCommon Webapp Vulnerabilities and What to Do About ThemEoin Woods · ACCU 2018
• 35mWeb Applications: Common Security IssuesAlejandro Parodi · Nerdearla 101 2022
• 58mModern web application bugsErlend Oftedal · NDC Minnesota 2019
• 45mSurvey of Notable Web Application Vulnerabilities from the Past YearMichał Sajdak · Oh My Hack 2025
• 41mTop Web Vulnerabilities in 40 MinutesSerhii Korolenko · QA Fest 2019
• 42mModern web application bugsErlend Oftedal · NDC Sydney 2018