Lesson 1: Code Injection and Session Management

This E-Commerce Security Course first lesson covers the following:

• Injection
• Broken Session Management

This lesson is conducted in partnership with Isaac Sabas and Jonathan Mantua of Pandora Security Labs. (offers advance IT security training and provider of WebRanger – an online security monitoring and attack blocking service.)

(Should you encounter a “secure connection failed” message in any of the video embedded, just click on the “try again” button to load it.)

WARNING: STUDENTS PARTICIPATING IN THIS PROGRAM SHOULD USE THE KNOWLEDGE AND INSIGHTS GAINED IN A RESPONSIBLE MANNER. Probing and attacking websites, whether successful or not, is a CYBERCRIME and will make you liable under the E-Commerce Law, CyberCrime Law, and Data Privacy Law.

Injection

Broken Session Management

Reference:

• WebGoat
• Wireshark
• OWASP 2013 Top 10 List

back to top

Join the 4 free webinar consultation sessions where you can show the exercises you have done, ask questions, and get answered. Sign-up here. Scheduled on Wednesday 8 pm this February 3, 10, 17, and 24, 2016.