← 全部课程
进阶
Web Exploitation Mastery.
The web attack surface end to end — how vulnerabilities arise, how to find them methodically, and how to report them, practised on isolated targets.
1The web attacker's map免费
2Authentication & sessions
- Where auth breaks阅读
- Sessions & JWT演练
3Injection
- The injection mindset阅读
- SQL injection, methodically演练
- Command injection阅读
4Access control
- IDOR & broken object-level auth演练
- Privilege & function-level control阅读
5Server-side flaws
- SSRF阅读
- XXE, SSTI, file upload阅读
6Client-side
- XSS & the browser trust model演练
- CSRF & friends阅读
7Chaining & reporting
- Bugs compound阅读
- The report演练
8Appendix · — Defender's note
- Appendix · — Defender's note阅读