Root-me: Javascript Authentication(write up) Telegram Channel: https://bit.ly/2AONyvP Instructor: H3lloR00T Subscribe to this channel if… you enjoy fun and ed...

Root-me : Javascript Authentication 2 (writeup) Telegram Channel: https://bit.ly/2AONyvP Instructor: H3lloR00T Subscribe to this channel if… you enjoy fun and...

OWASP 14-Full Path Disclosure
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
Full Path Disclosure (FPD) vulnerabilities enable the attacker to see the path to the webroot/file. e.g.: /home/omg/htdocs/file/. Certain vulnerabilities, such as using…

OWASP 15-Man-in-the-middle attack(MITM)
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
The man-in-the middle attack intercepts a communication between two systems. For example, in an http transaction the target is the TCP connection between client…

Root-me : Javascript - Obfuscation 1(write-up)
Telegram Channel:
https://bit.ly/2AONyvP
Instructor: H3lloR00T
Subscribe to this channel if… you enjoy fun and educational videos about technology & CyberSecurity & ...

OWASP 16-SQL Injection
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
A SQL injection attack consists of insertion or “injection” of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read…

Advance your tech skills with Pluralsight, an online learning platform with expert-led courses, certifications, assessments and hands-on experiences.

OWASP 17-SSI & SSRF
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
SSIs are directives present on Web applications used to feed an HTML page with dynamic contents. They are similar to CGIs, except that SSIs are used to execute some actions before…

OWASP 18-Special Element Injection
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
Special Element Injection is a type of injection attack that exploits a weakness related to reserved words and special characters.

Every programming language and…

OWASP 19-Web Parameter Tampering
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
The Web Parameter Tampering attack is based on the manipulation of parameters exchanged between client and server in order to modify application data, such as user…

OWASP 20-Xss in subtitle
●▬▬▬۩❁ @InfoSecTube❁۩ ▬▬▬▬●
OWASP Attacks Crash Course
It is possible for an attacker to execute JavaScript in a video’s subtitle. This is also referred to as XSS (Cross-Site Scripting).if a website load subtitle separately in…