1. Advanced Penetration testing
MIS
Week 8
Site:

2. Tonight's Plan In the news Presentations (1)
More Walk Through of WebGoat
Next Week
MIS

3. In The News
Submitted
MIS

4. In The News
Submitted
MIS

5. In The News
What I noted
MIS

6. Presentation
MIS

7. WebGoat Access Control Flaws Authentication Flaws Cross-Site Scripting
Stage 1
Stage 2
Authentication Flaws
Cross-Site Scripting
Phishing
Stage 5
Reflected XSS Attacks
Improper Error Handling
Fail Open Authentication Scheme
MIS

8. WebGoat Injection Flaws:
Command Injection: " & netstat -ant & ifconfig“
Numerical SQL Injection: or 1=1
Log Spoofing
XPATH Injection
String SQL Injection
Modifying Data with SQL Injection
Adding Data with SQL Injection
Blind Numeric SQL Injection
Blind String SQL Injection
MIS

9. Next Week
In the news
More Walkthrough of WebGoat
MIS

10. Questions ?
MIS