HackerFrogs AfterSchool - Web App Hacking Workshop 2 - Overthewire - Natas CTF Part 2 of 2 скачать в хорошем качестве

HackerFrogs AfterSchool - Web App Hacking Workshop 2 - Overthewire - Natas CTF Part 2 of 2

A step-by-step guide for this workshop can be found here: https://github.com/theshyhat/hackerfr... This workshop teaches a few basic web app hacking concepts and tools, including the following: Sourcecode analysis, local file inclusion, OS command injection, URL parameters. TIMESTAMPS 00:00 Intro 00:13 Previous Workshop Review 01:31 Part 1 - Natas 6 02:20 Sourcecode Analysis 05:24 URL Parameters 06:19 Local File Inclusion 06:44 Part 2 - Natas 7 08:09 Filesystem Structure 08:43 Web App File Access 10:08 Part 3 - Natas 8 12:21 Reverse Operations 15:28 Shameless Self Promotion 16:11 OS Command Injection 16:33 Part 4 - Natas 9 17:50 Injection String Anatomy 18:31 Part 5 - Natas 10 20:54 Summary 22:07 Outro The next workshop in this series can be found here: Web App Hacking Workshop 3 - Knight Labs - SQL Murd3r Mystery:    • HackerFrogs AfterSchool - Web App Hacking ...   This HackerFrogs workshop makes use of the Natas CTF game hosted on the overthewire.org website. https://overthewire.org/wargames/natas/ This channel is not associated with the overthewire.org website. ----------------------- Extra Credit Exercises ----------------------- Pico CTF and Portswigger Academy are other cybersecurity education websites, and the following challenges should be solveable after finishing this workshop. You will need to register valid user accounts at picoctf.org and portswigger.net to access these challenges. picoCTF – dont-use-client-side https://play.picoctf.org/practice/cha... picoCTF – Forbidden Paths https://play.picoctf.org/practice/cha... Portswigger - OS command injection, simple case https://portswigger.net/web-security/... -------------------- Extra Research -------------------- The following articles will help us further understand some of the concepts covered in this workshop: More local file inclusion (called "file path traversal" here): https://portswigger.net/web-security/... Portswigger's Article on OS Command Injection: https://portswigger.net/web-security/... ------------------ HackerFrogs Links ------------------ Livestream Channel: twitch.tv/theshyhat Twitter: twitter.com/theshyhat Reddit (Request Access to Join):   / hacking_tutorials