Injection Attacks | CWEE Applied Review #1

Описание: Thank you for watching!

My Blog Post on this Topic: https://gaberoy.zip/posts/injection-a...

Resources:
HTB Academy: https://academy.hackthebox.com/previe...
My Academy Referral Link: https://referral.hackthebox.com/mzwwJtG

Timestamps:
0:00 Introduction
2:36 XPath Introduction
5:20 XPath Injection Auth Bypass
8:52 XPath Injection Data Exfiltration
13:44 XPath Injection Blind Data Exfiltration
16:41 HTB - E.Tree
26:33 XPath Injection Prevention
26:58 LDAP Introduction
28:04 LDAP Injection Auth Bypass
29:21 LDAP Injection Data Exfiltration
30:39 HTB - Analysis
32:16 LDAP Injection Prevention
33:13 PDF Generation Introduction
34:18 HTML Injection in PDF Generation
37:24 HTB - Stocker
44:30 HTML/PDF Injection Prevention
45:46 Conclusion