Rana Khalil

SQL Injection | Complete Guide

SQL Injection - Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Cross-Site Request Forgery (CSRF) | Complete Guide

SQL Injection - Lab #2 SQL injection vulnerability allowing login bypass

SQL Injection - Lab #3 SQLi UNION attack determining the number of columns returned by the query

SQL Injection - Lab #11 Blind SQL injection with conditional responses

SQL Injection - Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Cross-Origin Resource Sharing (CORS) | Complete Guide

Server-Side Request Forgery (SSRF) | Complete Guide

Introduction to the Web Security Academy Series

Broken Access Control | Complete Guide

SQL Injection - Lab #4 SQL injection UNION attack, finding a column containing text

SSRF - Lab #1 Basic SSRF against the local server | Long Version

SQL Injection - Lab #7 SQL injection attack, querying the database type and version on Oracle

Authentication Vulnerabilities - Lab #11 Password reset poisoning via middleware | Long Version

Broken Access Control - Lab #5 URL-based access control can be circumvented | Short Version

Broken Access Control - Lab # 13 Referer-based access control | Long Version

Broken Access Control - Lab #8 UID controlled by parameter, with unpredictable UIDs | Short Version

Mastering Authentication Vulnerabilities - The Ultimate Hands-On Course on Udemy!

Authentication Vulnerabilities - Lab #4 Username enumeration via different responses | Short Version

Authentication Vulnerabilities - Lab #2 2FA simple bypass | Short Version

SQL Injection - Lab #14 Blind SQL injection with time delays and information retrieval

Authentication Vulnerabilities - Lab #12 Password brute-force via password change | Short Version

Authentication Vulnerabilities - Lab #6 Broken brute-force protection, IP block | Short Version

Authentication Vulnerabilities - Lab #8 2FA broken logic | Short Version

SQL Injection - Lab #18 Visible error-based SQL injection | Short Version

SQL Injection - Lab #16 Blind SQL injection with out of band data exfiltration | Long Version

SQL Injection - Lab #18 Visible error-based SQL injection | Long Version

Broken Access Control - Lab #2 Unprotected admin functionality with unpredictable URL | Long Version

Directory Traversal - Lab #5 File path traversal, validation of start of path | Long Version

Authentication Vulnerabilities - Lab #3 Password reset broken logic | Short Version

Broken Access Control - Lab #3 User role controlled by request parameter | Short Version

Directory Traversal - Lab #3 File path traversal, traversal sequences stripped | Long Version

Command Injection - Lab #4 Blind OS command injection with out-of-band interaction | Short Version

SQL Injection - Lab #10 SQL injection attack, listing the database contents on Oracle

SQL Injection - Lab #9 SQL injection attack, listing the database contents on non Oracle databases

Command Injection - Lab #4 Blind OS command injection with out-of-band interaction | Long Version

SQL Injection - Lab #17 SQL injection with filter bypass via XML encoding | Short Version

SQL Injection - Lab #7 SQL injection attack, querying the database type and version on Oracle

Authentication Vulnerabilities - Lab #11 Password reset poisoning via middleware | Short Version

Broken Access Control - Lab#12 Multi-step process with no access control on one step | Short Version

Authentication Vulnerabilities - Lab #2 2FA simple bypass | Long Version

SQL Injection - Lab #8 SQLi attack, querying the database type and version on MySQL & Microsoft

Broken Access Control - Lab #6 Method-based access control can be circumvented | Long Version

Authentication Vulnerabilities - Lab #7 Username enumeration via account lock | Short Version

Broken Access Control - Lab #8 UID controlled by parameter, with unpredictable UIDs | Long Version

Command Injection - Lab #1 OS command injection, simple case | Long Version

SQL Injection - Lab #8 SQLi attack, querying the database type and version on MySQL & Microsoft

Directory Traversal | Complete Guide

SQL Injection - Lab #9 SQL injection attack, listing the database contents on non Oracle databases

SQL Injection - Lab #10 SQL injection attack, listing the database contents on Oracle

SQL Injection - Lab #13 Blind SQL injection with time delays

SQL Injection - Lab #5 SQL injection UNION attack, retrieving data from other tables

Command Injection - Lab #3 Blind OS command injection with output redirection | Short Version

SQL Injection - Lab #15 Blind SQL injection with out-of-band interaction