The Exploit HQ

Web Application Security for Beginners

Five classic web flaws, exploited live in a safe lab, and how defenders stop each one.

  1. Web Application Security for Beginners — Start Here
  2. Broken Access Control & IDOR — Web Application Security for Beginners
  3. File Inclusion & Path Traversal — Web Application Security for Beginners (LFI/RFI)
  4. Information Disclosure Vulnerabilities Explained — Web Application Security for Beginners
  5. Parameter Tampering Explained — Web Application Security for Beginners
  6. Authentication Bypass Explained — Web Application Security for Beginners