search

Joldnine / joldnine.github.io

My github.io blog repo. https://joldnine.github.io
2 stars 1 forks source link

Web Security #27

Open Joldnine opened 6 years ago

Joldnine commented 6 years ago

Outline

  1. Introduction to Certificates and HTTPS
  2. Session Cloning Attacks
  3. Same-origin Policy
  4. Cross-site Scripting (XSS) and defense 4.1 Reflected XSS 4.2 Persistent XSS 4.3 DOM-based XSS
  5. Cross-site Request Forgery (CSRF)
  6. SQL Injection
  7. Password attacks
  8. Phishing
  9. Clickjacking
  10. Web SSO Attacks
  11. HTTP parameter pollution
  12. HTTP parameter tampering