کدنویسی امن

1.1. Course overview

00:07′

1.2. Broken Access Control (1)

00:17′

2.2. Broken Access Control (2)

00:25′

3.2. Sensetive Data Exposure

00:16′

4.2. Injections (SQLI)

00:16′

5.2. Injections (SQLI Example)

00:21′

6.2. Injections (No SQL / OS Command)

00:19′

7.2. Template and Xpath Injection

00:08′

8.2. Insecure Design

00:20′

9.2. Security Misconfiguration

00:16′

10.2. Security Misconfiguration Example

00:15′

11.2. Vulnerable and Outdated Components

00:14′

12.2. Vulnerable and Outdated Components Example

00:10′

13.2. Identification and Authentication Failures

00:15′

14.2. Identification and Authentication Failures Examples

00:10′

15.2. Software and Data Intergrity (Insecure CI/CD)

00:21′

16.2. Software and Data Intergrity (Insecure Puckling Unpickling)

00:13′

17.2. Security Logging and Monitoring Failures

00:22′

18.2. XML External Entities (XXE)

00:13′

19.2. XXE Examples

00:16′

20.2. Server Side Request Forgery

00:16′

1.3. Cross Site Scripting (XSS)

00:16′

2.3. XSS Examples

00:16′

3.3. Security Misconfiguration ClickJacking

00:17′

4.3. Cross-origin resource sharing (CORS)

00:13′

5.3. PostMessage XSS

00:09′

6.3. Prototype pollution (1)

00:16′

7.3. Prototype pollution (2)

00:10′

8.3. Content Security Policy (CSP)

00:10′

9.3. Cross Site Request Forgery

00:22′

10.3. Security In Development

00:27′