Week-02

Week 02 - SQL Injection and Cross Site Scripting

Application Security And Hardening

Return Home

View Lecture Notes

Goals

• Begin exploring application security fundamentals, particularly SQL Injection and XSS.
• Practice performing these attacks on our app and then harden it from these vulnerabilities.
• Explore additional resources for application security

Topics

• SQL Injection
• SQL Parameterization
• Cross Site Scripting (XSS)
• User Data Sanitization

Applications

• Week 02 - Insecure Blog App Part 1
  • A work-in-progress blogging application that we will build up in the coming weeks. This application is the perfect platform for us to learn and practice application security fundamentals.
• Cross-Site Scripting Sandbox
  • This sandbox will let us test out different types of script injections.