How to perform security testing of a Web application
summary
Covers practical techniques for finding and testing common web-application security vulnerabilities—specifically XSS, SQL injection, man-in-the-middle attacks, and brute-force attacks—to improve web app security. Uses hands-on examples and demonstrations as part of a non-functional testing session.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:12Conference agenda
- 2:19XSS types
- 7:06OWASP ZAP overview
- 8:30Finding XSS with ZAP
- 13:27SQLi risks
- 14:53Finding SQLi with sqlmap
- 16:15Exploiting SQLi
- 20:37sqlmap levels
- 21:43Preventing SQLi
- 22:03What is sniffing
- 23:28Wireshark for vulnerabilities
- 26:43Sniffing protection
- 27:04What is brute force
- 28:06Hydra for cracking
- 29:28Brute force demo
- 35:11Preventing brute force
- 35:31Summary
related talks
23mWeb Application Security - owasp top 10 vulnerabilities
59mPractical Security for Web Applications
45mWeb application security - A tale of security, betrayal and revenge
35mWeb Applications: Common Security Issues
22mWeb development security fundamentals
30mWeb Security Engineering - Protect all layers of your project
01h 04mWeb Security And You
44mSelected Vulnerabilities in Web Applications