Hack Yourself First: How to go on the Cyber-Offense [2013, ENG]

Обучающие видео » Компьютерные видеоуроки и обучающие интерактивные DVD » Программирование (видеоуроки)

Hack Yourself First: How to go on the Cyber-Offense

Год выпуска: 2013
Производитель: Pluralsight
Сайт производителя: http://pluralsight.com/training/Courses/TableOfContents/hack-yourself-first
Автор: Troy hunt
Продолжительность: 9h 25m
Тип раздаваемого материала: Видеоклипы
Язык: Английский
Описание:
"Взломай себя первым" - курс для тех, кто хочет находить уязвимости своих сайтов прежде, чем найдут другие.

"Hack Yourself First" is all about developers building up cyber-offense skills and proactively seeking out security vulnerabilities in their own websites before an attacker does.

The prevalence of online attacks against websites has accelerated quickly in recent years and the same risks continue to be readily exploited.
However, these are very often easily identified directly within the browser; it's just a matter of understanding the vulnerable patterns to look for.
This course comes at security from the view of the attacker in that their entry point is typically the browser.
They have a website they want to probe for security risks – this is how they go about it.
This approach is more reflective of the real online threat than reviewing source code is and it empowers developers to begin immediately assessing their applications even when they're running in a live environment without access to the source.
After all, that's what online attackers are doing.
[spoiler="Содержание"]
FileName Size Length Bit rate Data rate Resolution Frame Rate Parent Folder
01.About the course 3.24 MB 0:02:09 ‎128kbps 331.00 1024x768 ‎15 frames/second 01.Introduction
02.Why hack yourself first 7.16 MB 0:04:36 ‎128kbps 230.00 1024x768 ‎15 frames/second 01.Introduction
03.Introducing a vulnerable website – Supercar Showdown 13.9 MB 0:05:12 ‎128kbps 2561.00 1024x768 ‎15 frames/second 01.Introduction
04.Using Chrome's developer tools 12.6 MB 0:05:36 ‎128kbps 2688.00 1024x768 ‎15 frames/second 01.Introduction
05.Monitoring and composing requests with Fiddler 8.36 MB 0:04:55 ‎128kbps 2167.00 1024x768 ‎15 frames/second 01.Introduction
06.Modifying requests and responses in Fiddler 8.74 MB 0:03:26 ‎128kbps 1663.00 1024x768 ‎15 frames/second 01.Introduction
01.Introduction 2.26 MB 0:01:30 ‎128kbps 245.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
02.The three objectives of transport layer protection 4.18 MB 0:02:59 ‎128kbps 914.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
03.Understanding a man in the middle attack 6.29 MB 0:03:53 ‎128kbps 1548.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
04.Protecting sensitive data in transit 11.8 MB 0:06:23 ‎128kbps 2381.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
05.The risk of sending cookies over insecure connections 26.9 MB 0:12:56 ‎128kbps 2750.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
06.How loading login forms over HTTP is risky 43.0 MB 0:19:29 ‎128kbps 3640.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
07.Exploiting mixed-mode content 20.5 MB 0:10:39 ‎128kbps 439.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
08.The HSTS header 15.2 MB 0:07:11 ‎128kbps 2580.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
09.Summary 4.56 MB 0:03:05 ‎128kbps 1357.00 1024x768 ‎15 frames/second 02.Transport Layer Protection
01.Introduction 2.57 MB 0:01:45 ‎128kbps 1496.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
02.Understanding untrusted data and sanitisation 9.78 MB 0:06:53 ‎128kbps 1927.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
03.Establishing input sanitisation practices 7.84 MB 0:04:39 ‎128kbps 2522.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
04.Understanding XSS and output encoding 15.0 MB 0:10:44 ‎128kbps 1880.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
05.Identifying the use of output encoding 9.26 MB 0:05:00 ‎128kbps 3179.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
06.Delivering a payload via reflected XSS 14.7 MB 0:09:51 ‎128kbps 2036.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
07.Testing for the risk of persistent XSS 22.8 MB 0:08:13 ‎128kbps 2654.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
08.The X-XSS-Protection header 16.5 MB 0:06:58 ‎128kbps 2681.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
09.Summary 4.90 MB 0:03:16 ‎128kbps 1526.00 1024x768 ‎15 frames/second 03.Cross Site Scripting (XSS)
01.Introduction 1.75 MB 0:01:19 ‎128kbps 1160.00 1024x768 ‎15 frames/second 04.Cookies
02.Cookies 101 10.2 MB 0:07:05 ‎128kbps 2200.00 1024x768 ‎15 frames/second 04.Cookies
03.Understanding HttpOnly cookies 19.3 MB 0:05:34 ‎128kbps 3321.00 1024x768 ‎15 frames/second 04.Cookies
04.Understanding secure cookies 16.8 MB 0:06:55 ‎128kbps 3614.00 1024x768 ‎15 frames/second 04.Cookies
05.Restricting cookie access by path 23.1 MB 0:10:18 ‎128kbps 1139.00 1024x768 ‎15 frames/second 04.Cookies
06.Reducing risk with cookie expiration 12.3 MB 0:06:44 ‎128kbps 3026.00 1024x768 ‎15 frames/second 04.Cookies
07.Using session cookies to further reduce risk 8.86 MB 0:04:39 ‎128kbps 2795.00 1024x768 ‎15 frames/second 04.Cookies
08.Summary 4.09 MB 0:02:39 ‎128kbps 1730.00 1024x768 ‎15 frames/second 04.Cookies
01.Introduction 2.97 MB 0:02:02 ‎128kbps 1584.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
02.How an attacker builds a website risk profile 15.6 MB 0:07:21 ‎128kbps 5777.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
03.Server response header disclosure 11.6 MB 0:07:01 ‎128kbps 2250.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
04.Locating at-risk websites 19.8 MB 0:06:53 ‎128kbps 8626.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
05.HTTP fingerprinting of servers 14.0 MB 0:09:25 ‎128kbps 1418.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
06.Disclosure via robots.txt 7.42 MB 0:05:32 ‎128kbps 1110.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
07.The risks in HTML source 7.53 MB 0:04:38 ‎128kbps 2241.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
08.Internal error message leakage 17.9 MB 0:11:02 ‎128kbps 3687.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
09.Lack of access controls on diagnostic data 19.9 MB 0:11:27 ‎128kbps 3907.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
10.Summary 6.20 MB 0:04:03 ‎128kbps 1565.00 1024x768 ‎15 frames/second 05.Internal Implementation Disclosure
01.Introduction 3.21 MB 0:02:16 ‎128kbps 1592.00 1024x768 ‎15 frames/second 06.Parameter Tampering
02.Identifying untrusted data in HTTP request parameters 17.9 MB 0:11:01 ‎128kbps 229.00 1024x768 ‎15 frames/second 06.Parameter Tampering
03.Capturing requests and manipulating parameters 19.9 MB 0:09:57 ‎128kbps 3188.00 1024x768 ‎15 frames/second 06.Parameter Tampering
04.Manipulating application logic via parameters 14.6 MB 0:07:34 ‎128kbps 2079.00 1024x768 ‎15 frames/second 06.Parameter Tampering
05.Testing for missing server side validation 31.5 MB 0:16:20 ‎128kbps 579.00 1024x768 ‎15 frames/second 06.Parameter Tampering
06.Understanding model binding 5.03 MB 0:03:46 ‎128kbps 712.00 1024x768 ‎15 frames/second 06.Parameter Tampering
07.Executing a mass assignment attack 16.2 MB 0:09:16 ‎128kbps 2565.00 1024x768 ‎15 frames/second 06.Parameter Tampering
08.HTTP verb tampering 20.4 MB 0:11:27 ‎128kbps 2806.00 1024x768 ‎15 frames/second 06.Parameter Tampering
09.Fuzz testing 28.1 MB 0:14:43 ‎128kbps 4834.00 1024x768 ‎15 frames/second 06.Parameter Tampering
10.Summary 8.14 MB 0:05:30 ‎128kbps 1434.00 1024x768 ‎15 frames/second 06.Parameter Tampering
01.Outline 2.90 MB 0:02:02 ‎128kbps 1215.00 1024x768 ‎15 frames/second 07.SQL Injection
02.Understanding SQL injection 14.1 MB 0:09:52 ‎128kbps 2179.00 1024x768 ‎15 frames/second 07.SQL Injection
03.Testing for injection risks 13.9 MB 0:07:53 ‎128kbps 3198.00 1024x768 ‎15 frames/second 07.SQL Injection
04.Discovering database structure via injection 22.8 MB 0:13:42 ‎128kbps 3297.00 1024x768 ‎15 frames/second 07.SQL Injection
05.Harvesting data via injection 8.24 MB 0:04:36 ‎128kbps 2908.00 1024x768 ‎15 frames/second 07.SQL Injection
06.Automating attacks with Havij 12.9 MB 0:07:24 ‎128kbps 3424.00 1024x768 ‎15 frames/second 07.SQL Injection
07.Blind SQL injection 26.4 MB 0:17:01 ‎128kbps 504.00 1024x768 ‎15 frames/second 07.SQL Injection
08.Secure app patterns 13.1 MB 0:08:38 ‎128kbps 2574.00 1024x768 ‎15 frames/second 07.SQL Injection
09.Summary 8.61 MB 0:05:36 ‎128kbps 1689.00 1024x768 ‎15 frames/second 07.SQL Injection
01.Introduction 2.24 MB 0:01:36 ‎128kbps 1173.00 1024x768 ‎15 frames/second 08.Cross Site Attacks
02.Understanding cross site attacks 7.73 MB 0:05:00 ‎128kbps 159.00 1024x768 ‎15 frames/second 08.Cross Site Attacks
03.Testing for a cross site request forgery risk 14.2 MB 0:08:33 ‎128kbps 2313.00 1024x768 ‎15 frames/second 08.Cross Site Attacks
04.The role of anti-forgery tokens 21.6 MB 0:13:22 ‎128kbps 2470.00 1024x768 ‎15 frames/second 08.Cross Site Attacks
05.Testing cross site request forgery against APIs 26.0 MB 0:11:52 ‎128kbps 6108.00 1024x768 ‎15 frames/second 08.Cross Site Attacks
06.Mounting a clickjacking attack 29.5 MB 0:16:10 ‎128kbps 2386.00 1024x768 ‎15 frames/second 08.Cross Site Attacks
07.Summary 5.66 MB 0:03:47 ‎128kbps 1419.00 1024x768 ‎15 frames/second 08.Cross Site Attacks
01.Introduction 3.60 MB 0:02:25 ‎128kbps 1778.00 1024x768 ‎15 frames/second 09.Account Management
02.Understanding password strength and attack vectors 21.4 MB 0:12:00 ‎128kbps 783.00 1024x768 ‎15 frames/second 09.Account Management
03.Limiting characters in passwords 9.12 MB 0:06:21 ‎128kbps 1157.00 1024x768 ‎15 frames/second 09.Account Management
04.Emailing credentials on account creation 3.75 MB 0:02:13 ‎128kbps 2796.00 1024x768 ‎15 frames/second 09.Account Management
05.Account enumeration 12.1 MB 0:08:11 ‎128kbps 3025.00 1024x768 ‎15 frames/second 09.Account Management
06.Denial of service via password reset 3.51 MB 0:02:36 ‎128kbps 943.00 1024x768 ‎15 frames/second 09.Account Management
07.Correctly securing the reset processes 5.18 MB 0:03:36 ‎128kbps 2732.00 1024x768 ‎15 frames/second 09.Account Management
08.Establishing insecure password storage 16.6 MB 0:09:00 ‎128kbps 3345.00 1024x768 ‎15 frames/second 09.Account Management
09.Testing for risks in the 'remember me' feature 13.3 MB 0:05:49 ‎128kbps 5236.00 1024x768 ‎15 frames/second 09.Account Management
10.Re-authenticating before key actions 6.16 MB 0:04:28 ‎128kbps 1241.00 1024x768 ‎15 frames/second 09.Account Management
11.Testing for authentication brute force 13.0 MB 0:08:18 ‎128kbps 294.00 1024x768 ‎15 frames/second 09.Account Management
12.Summary 7.90 MB 0:05:08 ‎128kbps 1720.00 1024x768 ‎15 frames/second 09.Account Management
[/spoiler]
Файлы примеров: присутствуют
Формат видео: WMV
Видео: wmv3, 1024x768, 15fps, 159~8626 kbps
Аудио: wma2, 128kbps, 44.1kHz, Stereo
[spoiler="Скриншоты"]

[/spoiler]
Доп. информация: Exercise include slides, code files and Transcripts