Skip to content
5067CEM: Web Security
XSS Videos
Initializing search
5067CEM: Web Security
Home
Essentials
Essentials
Module Guide
Teaching and Learning
MS Teams
Assessment
Assessment
Overview
Coursework Brief
Guides
Guides
Overview
Using These Materials
Home Lab Setup
Docker Guide
Github Labs
Week 0 Pre-reading
Week 0 Pre-reading
Introduction
Building Websites
Encoding Data
Week 1 HTTP
Week 1 HTTP
Introduction
Lecture Materials
Lecture Materials
The HTTP Protocol
Requests and Responses
Sending User Data to the Server
Making Requests
Lab Tasks
Week 2 Sessions
Week 2 Sessions
Introduction
Lecture Materials
Lecture Materials
Authentication and Authorisation
Authentication in the Web
Storing Data on the Client
Sessions
Lab Tasks
Week 3 Security Audit
Week 3 Security Audit
Introduction
Lecture Materials
Lecture Materials
Security Audit
Mapping the Site
Mapping application Patameters
Conclusions
Lab Tasks
Week 4 Fuzzing and Content Discovery
Week 4 Fuzzing and Content Discovery
Introduction
Lecture Materials
Lecture Materials
Passive Scanning: Infrastructure
Passive Scanning: Websites
Common Files and Metadata
Fuzzing and Brute Force
Fuzzing for Hidden Pages
Fuzzing for Subdomains
Lab
Week 5 OWASP
Week 5 OWASP
Introduction
OWASP Overview
Lab
Week 6 Includes and Directory Traversal
Week 6 Includes and Directory Traversal
Includes and RCE
Videos
Materials
Materials
File Includes
LFI and Traversal
Remote File Includes
Getting a Shell with LFI
Upload Check Bypass
Week 7 SQL Injection
Week 7 SQL Injection
SQL Injection
SQL Injection
Introduction
Videos
Materials
Materials
SQL Basics and Syntax
SQLi Intro
NoSQL Injection
Week 8 XSS
Week 8 XSS
Cross Site Scripting
Videos
Videos
Table of contents
Reflected XSS
Stored XSS
XSS in Attributes
Session Jacking
Intro to Filter Trainer
Materials
Materials
What is XSS
Types of XSS
XSS_Payloads
Week 9 SSTI
Week 9 SSTI
Introduction
Materials
Materials
SSTI
Exploiting SSTI
Other Exploits
Lab
Lab
Lab Tasks
Easy Box Walkthrough
Table of contents
Reflected XSS
Stored XSS
XSS in Attributes
Session Jacking
Intro to Filter Trainer
Videos
Reflected XSS
Stored XSS
XSS in Attributes
Session Jacking
Intro to Filter Trainer
Back to top