Access Control - Applied Review
Access control is how we describe the constraints that we place on an authorized user in the context of accessing resources and performing actions. …
Business Logic Flaws - Applied Review
Business logic vulnerabilities are flaws in the design or implementation of an application that let attackers produce unintended behavior. This can …
Information Disclosure - Applied Review
Information disclosures seem to be highly contextual depending on where you find them and what kinds of protections are in place. Either way, we will …
OS Command Injection - Applied Review
This type of command injection allows attackers to execute system commands on the server that is running the vulnerable application. Often times, an …
Path Traversal - Applied Review
This will be one of the much shorter entries in the list of applied review sections because path traversal is pretty straight forward. Even though …
Authentication - Applied Review
For this applied review, we are going to go through authentication, which is an important part of securing your web applications. This is not meant to …
SQL Injection - Applied Review
The goal of this applied review is to review over SQL injection techniques taught in the PortSwigger labs and to apply those strategies to CTF …