Webapplication Security

Webapplication Security  

Praktika	6 SWS / 10 ECTS
Veranstalter:	Ludwig Peuckert, Fabian Franzen, Fabian Kilger, and Stephan Krusche
Zeit und Ort:	Preliminary Meeting: Wednesday, 03 February 2021 / 14 h
Beginn:

Dates

• 03.02.2020, 14:00: Preliminary Meeting - Onlinekonferenz  (Slides)
• 03.02.2020, 20:00: Qualification Challange available
  

Registration

• Solve our qualification challenge:
  • Step 1: Please pwn: http://honeynet.sec.in.tum.de:1338/hackysec.php
  • Step 2: Please submit your flag here: https://honeynet.sec.in.tum.de/websec
• Dont' forget to register via the matching system!

Contents

1. Injection vulnerabilities         
2. XSS, CSRF, sandbox escaping                                      
3. Include attacks
4. Cryptographic attacks       
5. Upload attacks
6. Configuration vulnerabilities
7. Advanced bugs
8. ... own suggestions?

Previous Knowledge

Databases, PHP / Java / Python Programming Languages

Literature

tba