Upgrade to Pro — share decks privately, control downloads, hide ads and more …

XSS, Session Fixation, and SQLi, Oh my!

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Duo Security Duo Security
September 27, 2012
Technology
4
290

XSS, Session Fixation, and SQLi, Oh my!

Jack Wink at GrrCon 2012:

An introduction to web hacking covering the cause, effect, detection and prevention of common web app vulnerabilities (XSS, session fixation/hijacking, SQLi, and remote code execution) in depth with live demos.

Avatar for Duo Security

Duo Security

September 27, 2012
Tweet

More Decks by Duo Security

See All by Duo Security
IYK4 and So Can You
Avatar for Duo Security duosec
6
360
Trusted Access, Trusted Company
Avatar for Duo Security duosec
8
700
Security Fact & Fiction: Three Lessons from the Headlines
Avatar for Duo Security duosec
2
570
Security for the People: End-User Authentication Security on the Internet
Avatar for Duo Security duosec
4
2k
Internet of Fails: Where IoT Has Gone Wrong and How We're Making it Right
Avatar for Duo Security duosec
1
1.3k
Stay Out of the Kitchen: A DLP Security Bake-Off by Zach Lanier and Kelly Lum
Avatar for Duo Security duosec
1
810
A Place to Hang Our Hats: Security Community and Culture by Domenic Rizzolo
Avatar for Duo Security duosec
3
300
Making Web Development "Secure By Default"
Avatar for Duo Security duosec
2
350
Bob Beck at BSDCan 2014: LibreSSL - An OpenSSL Replacement
Avatar for Duo Security duosec
3
570

Other Decks in Technology

See All in Technology
予期せぬコストの急増を障害のように扱う――「コスト版ポストモーテム」の導入とその後の改善
Avatar for Masahiro Yoshizawa muziyoshiz
1
2.1k
フルカイテン株式会社 エンジニア向け採用資料
Avatar for FULL KAITEN fullkaiten
0
10k
SREが向き合う大規模リアーキテクチャ 〜信頼性とアジリティの両立〜
Avatar for Kuniaki Moriya zepprix
0
480
こんなところでも（地味に）活躍するImage Modeさんを知ってるかい？- Image Mode for OpenShift -
Avatar for Masataka Tsukamoto tsukaman
1
170
Bedrock PolicyでAmazon Bedrock Guardrails利用を強制してみた
Avatar for Yudai Jinno yuu551
0
260
制約が導く迷わない設計 〜 信頼性と運用性を両立するマイナンバー管理システムの実践 〜
Avatar for ないとー bwkw
3
1.1k
コミュニティが変えるキャリアの地平線：コロナ禍新卒入社のエンジニアがAWSコミュニティで見つけた成長の羅針盤
Avatar for Kento Suzuki kentosuzuki
0
130
StrandsとNeptuneを使ってナレッジグラフを構築する
Avatar for やくも yakumo
1
130
会社紹介資料 / Sansan Company Profile
Avatar for Sansan, Inc. sansan33
PRO
15
400k
CDKで始めるTypeScript開発のススメ
Avatar for つくぼし tsukuboshi
1
570
GitHub Copilot CLI を使いやすくしよう
Avatar for Yuta Matsumura tsubakimoto_s
0
110
GitHub Issue Templates + Coding Agentで簡単みんなでIaC/Easy IaC for Everyone with GitHub Issue Templates + Coding Agent
Avatar for AEON aeonpeople
1
260

Featured

See All Featured
Unlocking the hidden potential of vector embeddings in international SEO
Avatar for Frank van Dijk frankvandijk
0
170
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
52
3.6k
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
350
The SEO identity crisis: Don't let AI make you average
Avatar for Varn varn
0
330
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
273
21k
The Mindset for Success: Future Career Progression
Avatar for Greg Gifford greggifford
PRO
0
240
Understanding Cognitive Biases in Performance Measurement
Avatar for Philip Tellis bluesmoon
32
2.8k
How to audit for AI Accessibility on your Front & Back End
Avatar for davetheseo davetheseo
0
180
Digital Ethics as a Driver of Design Innovation
Avatar for Per Axbom axbom
PRO
1
190
AI: The stuff that nobody shows you
Avatar for John Nunemaker jnunemaker
PRO
2
280
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
34
9.1k
Color Theory Basics | Prateek | Gurzu
Avatar for Gurzu gurzu
0
200

Transcript

  1. None
  2. None
  3. None
  4. None
  5. None
  6. None
  7. None
  8. None
  9. None
  10. None
  11. None
  12. None
  13. None
  14. None
  15. None
  16. None
  17. None
  18. None
  19. None
  20. None
  21. None
  22. None
  23. None
  24. None
  25. None
  26. None
  27. None
  28. None
  29. None
  30. None
  31. None
  32. None
  33. None
  34. None
  35. None
  36. None