How to get properly hacked!
summary
A live-coded e‑commerce app gets attacked end‑to‑end: login uses concatenated queries so SQL injection via string concatenation logs in as admin; passwords stored with MD5/plaintext are replaced with bcrypt instead of MD5; unauthenticated DELETE endpoints lack ACLs and logs lack user IDs causing repudiation; XML endpoints expose XXE to read local files; a phishing page performs CSRF until fixed with CORS tightening and a CSRF token via cookie; insecure deserialization in an old Spring dependency leads to RCE — run Dependency‑Track and upgrade libraries.
AI-written summary · about
chapters (16)
- 0:00Start
- 2:56How To Get Properly Hacked
- 14:24Gdbg Authentication
- 15:29F12
- 17:47Access Control Layer
- 20:00Repudiation
- 20:29Gdpr
- 23:31External Entities
- 27:02Xml Mapper
- 32:45Following the Cross-Origin Resource Sharing Policy
- 33:26Preflight Requests
- 37:35Synchronizers Token
- 38:28Spring Security
- 44:44Payload
- 47:12Input Validation
- 49:45Insecure Desalinization
related talks
41mLive Hacking: Breaking into Your Web App
47mDon't Get Burned! Secure Coding Essentials to Protect Your Application
59mDon't Get Burned! Secure Coding Essentials to Protect Your Application
30mThink Like a Hacker
21mHow to hack an Angular app?
47mLive Hacking: Breaking into Your Web App
47mEsoteric Web Application Vulnerabilities
32mHow to hack an Angular app?