English | MP4 | AVC 1280×720 | AAC 44KHz 2ch | 0h 50m | 85 MB
This course helps to understand different types of vulnerabilities in XML processing. You’ll learn how to test web applications for various XML processing flaws and how to provide countermeasures for these problems
XML processing is widely used in modern web applications. This course, Web App Hacking: Hacking XML Processing, will teach you how to avoid the severe consequences of insecure XML processing. First, you’ll learn how the attacker can read the content of sensitive files from the web server with an XML External Entity attack (XXE). Next, you’ll discover how the attacker can steal the SecretAccessKey of the application hosted on Amazon Web Services as a result of an XXE attack. Then, you’ll see how the attacker can get a discount in an online store as a result of an XPath injection. After that, you’ll cover how the attacker can steal a user’s password as a result of an XSS attack via XML. Finally, you’ll explore how the attacker can upload an XML-based image (SVG) and steal some sensitive data from a user as a result of an XSS attack via SVG. By the end of the course, you’ll know how to test web applications for various XML processing flaws and how to provide countermeasures for these problems.
Table of Contents
01 – Course Overview
02 – Introduction
03 – Overview
04 – Understanding XXE Attack
05 – Demo
06 – Fixing the Problem
07 – Summary
08 – Overview
09 – Stealing the SecretAccessKey of the Application Hosted on AWS
10 – Demo
11 – Summary
12 – Overview
13 – Understanding XPath Injection
14 – Demo
15 – Fixing the Problem
16 – Summary
17 – Overview
18 – Understanding XSS Attack
19 – Understanding XSS via XML
20 – Demo
21 – Fixing the Problem
22 – Summary
23 – Overview
24 – Understanding XSS via SVG
25 – Demo
26 – Summary
27 – Summary
Resolve the captcha to access the links!