OWASP 2-Blind SQL Injection
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
Blind SQL (Structured Query Language) injection is a type of SQL Injection attack that asks the database true or false questions and determines the answer based on the applications…

OWASP 3-Blind XPATH Injection
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course

XPath is a type of query language that describes how to locate specific elements (including attributes, processing instructions, etc.) in an XML document. Since it is…

OWASP 4-BruteForce
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course

A brute force attack can manifest itself in many different ways, but primarily consists in an attacker configuring predetermined values, making requests to a server using those…

OWASP 5-BruteForce
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course

This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they…

OWASP 6-Buffer Overflow
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course

Buffer overflow errors are characterized by the overwriting of memory fragments of the process, which should have never been modified intentionally or unintentionally. Overwriting…

OWASP 7-Cache Poisoning
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course

The impact of a maliciously constructed response can be magnified if it is cached either by a web cache used by multiple users or even the browser cache of a single user. If…

OWASP 8-CSV Injection
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files.
Instructor:@BiskooitPedar
▬▬▬۩❁ @InfoSecTube ❁۩ ▬▬▬▬●
Telegram Channel:…

OWASP 9-Cash Overflow
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
A Cash Overflow attack is a Denial of Service attack specifically aimed at exceeding the hosting costs for a cloud application, either essentially bankrupting the service owner…

OWASP 10-Remote Code Execution(RCE)
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
Code Injection is the general term for attack types which consist of injecting code that is then interpreted/executed by the application. This type of attack exploits…

OWASP 11-Cross-Site Request Forgery (CSRF)
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated.…

OWASP 12-Cross Site Scripting (XSS)
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur…

OWASP 13-Execution After Redirect (EAR)
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
Execution After Redirect (EAR) is an attack where an attacker ignores redirects and retrieves sensitive content intended for authenticated users. A successful…

Root-me: HTML disabled buttons(write up) Telegram Channel: https://bit.ly/2AONyvP Instructor: H3lloR00T Subscribe to this channel if… you enjoy fun and educat...

Root-me: Javascript Authentication(write up) Telegram Channel: https://bit.ly/2AONyvP Instructor: H3lloR00T Subscribe to this channel if… you enjoy fun and ed...