AI Features

0% completed

All LessonsFree Lessons (8)

Introduction

Who Is This Course For?What’s in This Course?

Patching

Introduction Upgrading Third-Party Libraries and Software A Closer Look at Patching Library Inventory Dependency Management: Python Dependency Management: JavaScript Automating Vulnerability Detection Network Inventory Nmap OpenVAS Patching Windows Finding Published Vulnerabilities Testing Your Patches If Patching Hurts, Do It More Often

Vulnerabilities

Introduction to SQL

Challenge: Select The Journal

Solution Review: Select The Journal

More SQL Commands

Challenge: Write a Generalized Query

Solution Review: Write a Generalized Query

How SQL Injection Works

Extending the Defense Beyond Prepared Statements

Additional Defenses as a Mitigation Against Future Mistakes

Putting It All Together for a Robust Defense

Introduction to Cross-Site Scripting (XSS)

Defenses against XSS

Introduction to Cross-Site Request Forgery (XSRF)

XSRF Prevention with SameSite

Misconfiguration

Default Passwords & Credentials

Jenkins & Public-Facing Servers

Cryptography

Introduction Don’t Roll Your Own Crypto Some Key Principles Security When the Enemy Knows the System Don’t Use Low-Level Crypto Libraries ECB Malleability CBC Is Still Malleable Evaluating Crypto Libraries Without Being a Crypto Expert Password Storage More Techniques for Password Storage Storing Passwords When You’re the Client Minimizing the Cost of Credential Loss Keeping Passwords Hard to Predict TLS Configuration What’s Next?

Windows

Introduction Login and Mimikatz Password Policy Active Directory: What Else Is It Good For?BitLocker What’s Next?

Phishing

Introduction Types of Phishing Attacks Social Defense DNS-Based Defense SPF DNS-Based Defense: DKIM DNS-Based Defense: DMARC Authentication-Based Defense Wrapping up!

Practical Security: Simple Practices for Defending Your Systems

What’s Next?

That's it for this chapter.

We'll cover the following...

- Suggested reading
- What’s next?

Suggested reading

We’ve covered just some of the basics here. If you’d like to dig in ...