-: In this section of the course, 2 2
we're going to cover mitigating web application vulnerabilities 3 3
and attacks. 4 4
Now, in the last section of the course, 5 5
we were focused on software vulnerabilities, 6 6
but this time, we're going to be focused on web applications 7 7
and their vulnerabilities as we return back into domain 2, 8 8
vulnerability management in this section of the course. 9 9
Now, once more, 10 10
we're going to be focused on objectives 2.4 and 2.5. 11 11
Objective 2.4 states, that given a scenario, 12 12
you must be able to recommend controls 13 13
and mitigate attacks and software vulnerabilities. 14 14
And objective 2.5 states, 15 15
you must be able to explain concepts 16 16
related to vulnerability response, handling, and management. 17 17
Now, as we move through this section, 18 18
we're going to be discussing a lot of different types 19 19
of vulnerabilities and attacks, 20 20
including things like directory traversals, 21 21
cross-site scripting, SQL injections, 22 22
and XML vulnerabilities. 23 23
Then we'll discuss some of the secure coding best practices 24 24
that you can use to help prevent 25 25
some of these types of attacks 26 26
and the different vulnerabilities 27 27
from being exploited in the first place. 28 28
Next, we're going to go and talk about other attacks, 29 29
things like authentication attacks, session hijacking, 30 30
server-side request forgery, 31 31
sensitive data exposures, and clickjacking. 32 32
After that, we're going to do a demonstration 33 33
to assess the impact of web application vulnerabilities 34 34
by seeing some of them in action 35 35
as I perform some basic penetration testing techniques 36 36
against a vulnerable web application. 37 37
And finally, we're going to take a short quiz 38 38
to see what you learned during this section of the course. 39 39
Interview each of those quiz questions 40 40
to ensure you can explain why the right answers were right. 41 41
So let's start exploring the world 42 42
of web application vulnerabilities and attacks, 43 43
as well as how to best mitigate them 44 44
in this section of the course.