Injections - 4 Ways of Penetration
summary
Covers four types of injection vulnerabilities: SQL, HTML, XML, and command-line injection. Explains their prevalence (about 28% of sites vulnerable), the risks—such as altering a site's frontend via HTML/XML injection—and how command-line injection can expose server structure or provide server access.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 3:46What are injections
- 5:33Injection example
- 8:07HTML injection
- 14:15SQL injection mechanics
- 19:14XML privilege escalation
- 21:50Command injection & DoS
- 25:56Defending against injections
- 28:03Security best practices
- 31:51Injection scanners
- 33:49Q&A
related talks
54mTaking on the King: Killing Injection Vulnerabilities
49mThe New Page of Injections Book: Memcached Injections
41mSecurity Vulnerabilities Decomposition: Another Way To Look At Vulnerabilities
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
44mEnding Injection Vulnerabilities
53mOWASP Top 10: What are them and how to prevent them
19mFrontend Security is a Thing
36mGive Me a SQL Injection, I Shall PWN IIS and SQL Server