Web Hacking & Secure Coding That Web Developers and Information Security Beginners Must Know

2. APMSetup Concept and Installation

3. magic_quotes_gpc setting in php.ini file

4. Change MySQL initial password

5. Vulnerable Environment Build

6. [Additional] Method for Intercepting Only Desired Requests and Responses in Burp Suite and Saving Settings

8. Hackers' attack hotspot, Web Services

9. Scope of damage from web hacking

12. [Practice 1-1] Burp Suite Installation and Usage

15. [Practice 2-1] Method for Determining Vulnerability Presence/Absence

16. Attack Type

17. What is an authentication bypass attack?

18. Analysis of Authentication Bypass Attack Principles

19. [Lab 2-2] Unauthorized User Login Lab via Authentication Bypass Attack

20. [Lab 2-3] Authentication Bypass Attack - Unauthorized Private Post Viewing Practice

21. Practice/Lab 2-4: Unauthorized Post Deletion via Authentication Bypass Attack

22. [Lab 2-5] Authentication Bypass Attack Method if idx Parameter is Vulnerable

23. What is a data query attack?

24. Data Query Attack Techniques

25. What is a UNION-BASED attack?

26. [Lab 2-6] Lab on Stealing Critical Information via UNION-BASED Attack

27. [Practice 2-7] Unauthorized Local File Reading Through UNION-BASED Attack Exercise

28. What is a BLIND-BASED attack?

29. [Practice 2-8] Understanding BLIND-BASED Data Inference Techniques through Practice

30. [Lab 2-9] Practice: Important Information Exfiltration via BLIND-BASED Attack

31. Action Plan Overview

32. Response Plan-1

33. Response Plan-2

34. Response Plan-3

35. [실습2-10] Secure Coding Lab: Applying to Vulnerable Environments

36. What is OS Command Injection?

37. Attack Target

38. SQL Injection vs OS Command Injection

39. Attack principle analysis

40. [Practice 3-1] OS Command Injection Attack Practice

41. [Lab 3-2] Reverse-Shell Lab via OS Command Injection Attack

42. Response Plan

43. [Lab 3-3] Vulnerable Environment Secure Coding Practice

44. What is XXE Injection?

45. Attack Target

46. Attack Principle Analysis

47. [Practice 4-1] XXE Injection Attack Lab

48. Response Plan

49. [Lab 4-2] Applying Secure Coding in Vulnerable Environments

50. What is XSS?

51. Attack Target

52. Attack type

53. Attack Technique

54. Analysis of Attack Principle

55. [Lab 5-1] DOM-BASED XSS Attack Lab

56. [Lab 5-2] REFLECTED XSS Attack Lab

57. [Practice 5-3] STORED XSS Attack Practice

58. Understanding Session Hijacking and Analysis of Attack Principles

59. [Lab 5-4] Session Hijacking Attack Lab

60. [Practice 5-5] XSS Attack on MyPage and Practicing XSS Attack Without Angle Brackets

61. Response Plan

62. [Practice 5-6] Vulnerable Environment Secure Coding Practice

63. [Lab 5-7] Session Hijacking Attack Countermeasure Lab

64. What is CSRF?

65. Attack Principle Analysis

66. XSS vs CSRF

67. [Lab 6-1] CSRF Attack Lab: Unauthorized Post Write, Edit, Delete

68. [Lab 6-2] Unauthorized Member Info Modification, Password Change, and Member Withdrawal Practice through CSRF Attack

69. [Practice 6-3] Stealth CSRF Attack using Ajax

70. Response Plan

71. Detailed Working Principle of CSRF Token

72. [Practice 6-4] Secure Coding for Vulnerable Environments Practice-1

73. [Exercise 6-5] Vulnerable Environment Secure Coding - 2

74. [Lab 6-6] Vulnerable Environment Secure Coding Practice - 3

75. What is a file download vulnerability?

76. Attack Principle Analysis

77. Attack Method

78. [Exercise 7-1] File Download Vulnerability Attack Practice

79. [Practice 7-2] Applying Incorrect Countermeasures Often Misapplied by Developers

80. [Exercise 7-3] Fun Practical Case Analysis

81. Measures

82. [Lab 7-4] Vulnerable Environment Secure Coding Lab

83. What is a file upload vulnerability?

84. Attack Mechanism Analysis

85. What is a webshell?

86. [Lab 8-1] Simple webshell creation and file upload vulnerability attack lab

87. [Lab 8-2] Reverse-Shell Practice via File Upload Vulnerability Attack

88. Verification Logic Type

89. Understanding of file extension validation logic

90. [Practice 8-3] Applying Incorrect Countermeasures Developers Often Mistake

91. [Practice 8-4] IIS Semicolon Vulnerability Practice and Secure Coding Application

92. Response Plan

93. [Practice 8-5] Vulnerable Environment Secure Coding Practice

94. What is a parameter tampering vulnerability?

95. Attack Principle Analysis

96. [Lab 9-1] Exploiting Parameter Manipulation Vulnerability: Unauthorized Edit/Delete of Other Users' Posts

97. [Lab 9-2] Unauthorized Access to Other User Information Through Parameter Tampering Vulnerability Attack Lab

98. [Practice 9-3] Practice Forcing Other Users to Log Out Through a Parameter Tampering Vulnerability Attack

99. Response plan

100. [Exercise 9-4] Practice Applying Secure Coding in Vulnerable Environments

101. What is the insufficient URL access restriction vulnerability?

102. Understanding Authentication and Authorization

103. Attack Principle Analysis

104. [Practice 10-1] Weak URL Access Control Vulnerability Attack Lab

105. Countermeasures

106. [Practice 10-2] Secure Coding Practice in Vulnerable Environment

107. Security Tester vs Web Developer, Proper Attitude Towards Vulnerabilities

108. Study direction

109. Upon completing the training...