Bypassing Content Security Policy in Modern Web Applications
Category: Tutorials
- views: 298
- date: 27 May 2023
- posted by: oaxino
Bypassing Content Security Policy in Modern Web Applications
Published 5/2023
Created by Dawid Czagan
MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English | Duration: 5 Lectures ( 1h 4m ) | Size: 346 MB
Learn How Hackers Can Bypass the Most Powerful Defensive Technology in Modern Web Applications
What you'll learn
Discover how hackers can bypass a CSP via ajax(dot)googleapis(dot)com
Explore how hackers can bypass a CSP via Flash file
Learn how hackers can bypass a CSP via polyglot file
Discover how hackers cab bypassing a CSP via AngularJS
Learn step by step how all these attacks work in practice (DEMOS)
Check if your Content Security Policy is vulnerable to these attacks
Become a successful penetration tester / ethical hacker
Learn from one of the top hackers at HackerOne
Requirements
Basic hacking skills
Basic understanding of XSS attacks
Description
Content Security Policy (CSP) is the most powerful defensive technology in modern web applications. For hackers, this is an obstacle that blocks their attacks. That's why hackers are very interested in bypassing Content Security Policy and obviously you don't want that to happen.In this course, you'll learn how your Content Security Policy can be bypassed by hackers. What's more, you'll learn how to check if your Content Security Policy is vulnerable to these attacks. First, I'll show you how hackers can bypass a CSP via ajax(dot)googleapis(dot)com. Next, I'll present how hackers can bypass a CSP via Flash file. After that, I'll explain to you what a polyglot file is and how it can be used to bypass a CSP. Finally, I'll present how hackers can bypass a CSP via AngularJS.-----------------------------------------------*** For every single attack presented in this course there is a DEMO *** so that you can see step by step how these attacks work in practice. I hope this sounds good to you and I can't wait to see you in the class.-----------------------------------------------Case #1: Bypassing CSP via ajax(dot)googleapis(dot)comCase #2: Bypassing CSP via Flash FileCase #3: Bypassing CSP via Polyglot FileCase #4: Bypassing CSP via AngularJS
Who this course is for
Penetration testers, ethical hackers, bug hunters, security engineers / consultants
Download link
rapidgator.net:
uploadgig.com:
nitroflare.com:
1dl.net:
We need your support!
Make a donation to help us stay online
Bitcoin (BTC)
bc1q08g9d22cxkawsjlf8etuek2pc9n2a3hs4cdrld
Bitcoin Cash (BCH)
qqvwexzhvgauxq2apgc4j0ewvcak6hh6lsnzmvtkem
Ethereum (ETH)
0xb55513D2c91A6e3c497621644ec99e206CDaf239
Litecoin (LTC)
ltc1qt6g2trfv9tjs4qj68sqc4uf0ukvc9jpnsyt59u
USDT (ERC20)
0xb55513D2c91A6e3c497621644ec99e206CDaf239
USDT (TRC20)
TYdPNrz7v1P9riWBWZ317oBgJueheGjATm
Information |
|||
 |
Users of GUESTS are not allowed to comment this publication. | ||