Secure coding
Secure coding
Modern forms of markup languages such as HTML, XML and XHTML are mostly used in designing web pages. XML, which stands for Extensible Markup Language, define
March 28, 2018
Infosec InstituteSecure coding
1. What security features and controls are built into your product? Every software product should include the following aspects: Basic security measure
December 23, 2017
Dimitar KostadinovSecure coding
Introduction and background An application has been developed in PHP, and the source code of the login page is given for source code review to ensure that no
August 18, 2017
SrinivasSecure coding
Introduction and background: A penetration test has been conducted on the following URL, and a SQL Injection vulnerability was identified. http://192.168.56.
August 16, 2017
SrinivasSecure coding
If a user refreshes a page after submitting a form, he may accidentally post the content again resulting in duplicate submission, thus causing undesired re
August 14, 2017
SrinivasSecure coding
Many websites require file upload functionality for their users. Social networking websites, such as Facebook and Twitter allow their users to upload profile
August 11, 2017
SrinivasSecure coding
File inclusion is one of the popular yet old vulnerabilities that are often seen in websites. [pkadzone zone="main_top"] PHP websites that make use
August 9, 2017
SrinivasSecure coding
Identifying SQL Injection vulnerabilities The first step in exploiting a SQL injection is to identify the vulnerability. This first section of this lab walks
August 7, 2017
SrinivasSecure coding
Introduction and background A developer has created a web application in PHP, and the application makes use of configuration files from the config folder of
August 3, 2017
SrinivasSecure coding
SonarQube is an open source quality management software that analyzes and measures the technical quality of project portfolio to a method which essentially m
April 28, 2017
Chiragh DewanLearn Secure Coding
Get hands-on experience with common coding mistakes, how they can be exploited and possible mitigations. Learn secure coding in:
- Android and iOS
- C/C++, Java, .NET and PHP
- And more
In this series
- Enhancing code security: Tools and techniques for safeguarding your code
- DevSecOps Tools of the trade
- Software dependencies: The silent killer behind the world's biggest attacks
- Software composition analysis and how it can protect your supply chain
- Only 20% of new developers receive secure coding training, says report
- Introduction to Secure Software Development Life Cycle
- How to control the flow of a program in x86 assembly
- Mitigating MFA bypass attacks: 5 tips for developers
- How to diagnose and locate segmentation faults in x86 assembly
- How to use the ObjDump tool with x86
- Debugging your first x86 program
- How to build a program and execute an application entirely built in x86 assembly
- Overview of common x86 instructions
- x86 basics: Data representation, memory and information storage
- What is x86 assembly?
- Introduction to x86 assembly and syntax
- Introduction to variables
- How to mitigate Race Conditions vulnerabilities
- How to avoid Cryptography errors
- Cryptography errors Exploitation Case Study
- How to exploit Cryptography errors in applications
- How to exploit race conditions
- Email-based attacks with Python: Phishing, email bombing and more
- Attacking Web Applications With Python: Recommended Tools
- Attacking Web Applications With Python: Exploiting Web Forms and Requests
- Attacking Web Applications With Python: Web Scraper Python
- Python for Network Penetration Testing: Best Practices and Evasion Techniques
- Python for network penetration testing: Hacking Windows domain controllers with impacket Python tools
- Python Language Basics: Variables, Lists, Loops, Functions and Conditionals
- How to Mitigate Poor HTTP Usage Vulnerabilities
- How to Exploit Poor HTTP Usage
- Introduction to HTTP (What Makes HTTP Vulnerabilities Possible)
- How to Mitigate Integer Overflow and Underflow Vulnerabilities
- How to exploit integer overflow and underflow
- Introduction to Parallel Processing
- What are Race Conditions?
- How Are Credentials Used In Applications?
- How To Exploit Least Privilege Vulnerabilities
- XSS Vulnerabilities Exploitation Case Study
- What is is integer overflow and underflow?
- SQL Injection Vulnerabilities Exploitation Case Study
- How to exploit improper error handling
- Improper Error Handling Exploitation Case Study
- Why Improper Error Handling Happens
- How to exploit CSRF Vulnerabilities
- How to mitigate CSRF Vulnerabilities
- What Causes Command Injection Vulnerabilities? (How are Data and Code Handled in Execution Environments)
- Command Injection Vulnerabilities
- Command Injection Vulnerabilities Exploitation Case Study
- How to mitigate Command Injection Vulnerabilities