Browser Artifact Common objects that browsers save: Navigation history: user history Autocomplete data: suggest based on most frequently searched keywords Bookmarks: save website URL address...

Session Server side storage. Session Fixation: Issue: An attacker tricks a user into using a predetermined session ID, allowing the attacker to hijack the session after login. ...

Terms Source (input) Sink (output) document.write() document.writeln() document.domain DOM.innerHTML -> script tag is banned, use img onerror= instead DOM...

What is Threat Modeling? A systematic approach to identifying, assessing, and prioritizing security risks to a system, application, or process. Helps organizations proactively identify potential th...

Definition user input must be directly or indirectly go into a web query that executes system commands Impact Server takeover Malicious command execution Technique To inject an additional c...

Same Origin Policy (SOP) prevent document on one website from interacting with another website Origin: protocol, host, port provides isolation access prevented: cookies, DOM access, AJAX r...

Type In-band Union based Error based Blind Boolean based, returns True or False Time based, utilize Sleep function if True Out of band ->...

What? Upload malicious file to perform arbitrary execution commands Impact Arbitrary execution Introduce new vulnerability html, XSS svg, XXE, read file zip bomb, DOS ...

An event is an action occurring in a system or network. Examples of events are: A user sending an email A mouse click A firewall allowing a connection request An incident is an event with ...

Enumeration is identifying all of the ways we could attack a target we must find. Enumeration is collecting as much information as possible. The more information we have, the easier it will be for ...