Integrating Security Measures Throughout Development
summary
Live demos show XSS executing an image onerror exfiltrating cookies and SQL injection logging in with or 1=1 then dumping MD5 hashes via sqlmap, path traversal reading /etc/shadow and turning file include into an RFI reverse shell, and ACLs blocking a MySQL probe. Tools used include Burp, nmap, Metasploit, OpenVAS and Nessus, and recommendations include bcryptjs for passwords and Bloodhound to map lateral movement.
AI-written summary · about
chapters (9)
- 0:00Integrating security in development
- 2:01Cross-site scripting vulnerabilities
- 5:31SQL injection risks
- 9:31Broken authentication
- 12:01Local file inclusion exploits
- 14:08Secure development prevention
- 16:32Vulnerability scanning and pen testing
- 19:48Preventing lateral movement
- 21:13Summary
related talks
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
22mSecure Your Code — Injections and Logging
01h 01mHow hacking works - Web edition
47mLive Hacking: Breaking into Your Web App
57mEnterprise Ethical Hacking Cloud Applications
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
58mModern web application bugs
52mDevSecOps