Aggregator

Video: Web Application Security Fundamentals

Embrace The Red
3 years 6 months ago
In this 25 minute video I’m explaining the foundations of Web Application Security. The video covers the basic building blocks of web applications, such as HTML, HTTP, JavaScript and Cookies. Furthermore core web applications security concepts such as the Same-Origin Policy are discussed in detail. The goal is to provide foundational knowledge to help grasp security vulnerabilities, such as XSS, CSRF, SQLi, tab-nabbing, etc. later on. In the past I have trained and presented content like this to thousands of engineers at large organizations and cloud providers, hence its quite optimized for best learning and comprehension outcome.

基于HTTP协议的WAF绕过

同程旅行安全应急响应中心
3 years 6 months ago
在实际攻击场景中，攻击者在进行web漏洞攻击时常常会碰到WAF（网站应用级入侵防御系统）的阻拦，为了测试绕过WAF的防御，安全人员也研究了各种各样的姿势。本文就针对基于HTTP协议的WAF绕过思路进行了梳理。

PHP 8 新特性介绍

她和她的猫
3 years 7 months ago
前言 距离 PHP 8 发布已经有一年多了，这个版本是 PHP 语言的主版本更新，包含了很多新功能与优化项，并改进了类型系统、错误处理，目前已经迭代到 PHP 8.0.10 版本。 由于更新的

Passwords ? Extinction Event Looming?

The Akamai Blog
3 years 7 months ago
Passwords are the bane of users and security teams? lives. Despite years of security teams educating users about not using 123456 as a password, not recycling passwords across multiple personal and professional accounts, and implementing even more rigorous password rules and investments in password manager tools, these combinations of letters, numbers, and special characters remain a rich target for attackers.
Richard Meeus

Managed ad