OWASP Newcastle Webinar - 5th May 2020
Earlier this year I did an internal presentation to my colleagues at Pentest Ltd on the topic of Malware Analysis and Intelligence Recon. The presentation
OWASP
Web Application Vulnerabilities 101 - Directory Traversal
Directory traversal aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash (../)” sequences
DVWA - File Inclusion
LFI & RFI are commonly found in poorly written PHP code, allows an attacker to include a local or remote PHP file into the webservers running
CSRF - Cross Site Request Forgery
CSRF refers to an attack against authenticated web applications using Cookies wherein an attacker is able to trick a victim into making a request that
XSS - Cross Site Scripting
XSS in an input validation weakness which allows an attacker to inject a payload into a response from the application. When the payload can included