splitline/How-to-Hack-Websites
Stars: 427
Forks: 43
Pull Requests: 3
Issues: 2
Watchers: 6
Last Updated: 2022-03-21 18:16:14
開源的正體中文 Web Hacking 學習資源 - 程式安全 2021 Fall
License:
Languages: Dockerfile, PHP, Python, HTML, Shell, Hack, JavaScript
How to Hack Websites
Videos
Topics
初章
- Web & Web security introduction [slide]
- Access control & Bussiness logic
- Recon & Information leak [slide]
- Insecure Upload / Path traversal / LFI [slide]
- Basic injection [slide]
- Code injection
- Command injection
- SQL injection: Basic
續章
- SQL injection: Advanced
- Union-based
- Boolean-based
- Other
- Server-side request forgery (SSRF)
- Insecure deserialization
- Intro
- Pickle
終章
- Insecure deserialization [slide]
- PHP
- POP Chain
- Misc (Java, .NET etc.)
- Frontend security: Basic [slide]
- Same-origin policy
- CSRF
- XSS
- Frontend security: Content Security Policy (CSP) [slide]
- Frontend security: Advanced
- Advanced injection
- NoSQL injection
- Server-side template injection (SSTI)
- Misc
- JavaScript prototype pollution [slide]
- XXE
Labs
題目之後的
數字代表的是 docker 對外通訊埠編號
- Basic
- Cat Shop
8100
- Cat Shop
- SQL injection
- Login me: Login bypass
8200 - Login me again: UNION-based SQL injection
8201
- Login me: Login bypass
- Command injection
- DNS tool
8300 - DNS tool: WAF edition
8301
- DNS tool
- LFI
- Meow site: Basic LFI
8400 - HakkaMD: LFI to RCE
8401
- Meow site: Basic LFI
- SSRF
- Web Preview Service: Use
gopher://to forge a request8500 - SSRFrog: Bypass blacklist
8501
- Web Preview Service: Use
- Deserialization
- Pickle
8600 - Cat: Basic PHP unserialize
8601 - Magic cat: POP chain
8602
- Pickle
- SSTI
- Jinja2 SSTI
8700
- Jinja2 SSTI
- Frontend
- XSS
8800
- XSS
Homework
- Imgura: Information Leak / Upload / LFI
- DVD Screensaver: Path traversal / SQL injection / Signed Cookie
- Profile Card: XSS / CSRF / CSP Bypass
- Double SSTI: SSTI
- Log me in: FINAL: SQL injection / Information Leak