RedSec
33 lessons

Finding vulnerabilities

The core bug classes and how to actually find them.

  1. 001 A repeatable methodology Turn "poke around and hope" into a process that consistently finds bugs. intro tutorial
  2. 002 IDOR Insecure direct object references — when an app trusts an ID and forgets the ownership check. intro tutorial
  3. 003 SQL injection When input reaches a query unsanitized, you can change what the query means. intro tutorial
  4. 004 Attack surface mapping Learn Attack surface mapping through a safe, repeatable finding vulnerabilities workflow. intro tutorial 20 min
  5. 005 Hypothesis-driven testing Learn Hypothesis-driven testing through a safe, repeatable finding vulnerabilities workflow. intro tutorial 20 min
  6. 006 Input inventory techniques Learn Input inventory techniques through a safe, repeatable finding vulnerabilities workflow. intro tutorial 20 min
  7. 007 State change testing Learn State change testing through a safe, repeatable finding vulnerabilities workflow. intro tutorial 20 min
  8. 008 Business logic review Learn Business logic review through a safe, repeatable finding vulnerabilities workflow. intro tutorial 20 min
  9. 009 Chaining low severity issues Learn Chaining low severity issues through a safe, repeatable finding vulnerabilities workflow. intro tutorial 20 min
  10. 010 Comparing user roles Learn Comparing user roles through a safe, repeatable finding vulnerabilities workflow. intro reference 12 min
  11. 011 Finding hidden assumptions Learn Finding hidden assumptions through a safe, repeatable finding vulnerabilities workflow. intro tutorial 20 min
  12. 012 Writing test matrices Learn Writing test matrices through a safe, repeatable finding vulnerabilities workflow. core lab 30 min
  13. 013 Ending a target review Learn Ending a target review through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  14. 014 Endpoint inventory by role Learn Endpoint inventory by role through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  15. 015 Parameter tampering workflow Learn Parameter tampering workflow through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  16. 016 HTTP method matrix Learn HTTP method matrix through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  17. 017 Multi user comparison workflow Learn Multi user comparison workflow through a safe, repeatable finding vulnerabilities workflow. core reference 12 min
  18. 018 Negative testing mindset Learn Negative testing mindset through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  19. 019 State machine testing Learn State machine testing through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  20. 020 Race window identification Learn Race window identification through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  21. 021 Trust boundary inventory Learn Trust boundary inventory through a safe, repeatable finding vulnerabilities workflow. core lab 30 min
  22. 022 Chaining information leaks Learn Chaining information leaks through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  23. 023 Chaining authorization bugs Learn Chaining authorization bugs through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  24. 024 Chaining SSRF to metadata in labs Learn Chaining SSRF to metadata in labs through a safe, repeatable finding vulnerabilities workflow. core reference 12 min
  25. 025 Finding forgotten admin features Learn Finding forgotten admin features through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  26. 026 Finding hidden file processors Learn Finding hidden file processors through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  27. 027 Finding export and import bugs Learn Finding export and import bugs through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  28. 028 Finding notification workflow bugs Learn Finding notification workflow bugs through a safe, repeatable finding vulnerabilities workflow. core tutorial 20 min
  29. 029 Finding billing logic bugs Learn Finding billing logic bugs through a safe, repeatable finding vulnerabilities workflow. advanced tutorial 35 min
  30. 030 Finding invite and team bugs Learn Finding invite and team bugs through a safe, repeatable finding vulnerabilities workflow. advanced lab 45 min
  31. 031 Finding integration webhook bugs Learn Finding integration webhook bugs through a safe, repeatable finding vulnerabilities workflow. advanced reference 12 min
  32. 032 Reviewing logs for exploit evidence Learn Reviewing logs for exploit evidence through a safe, repeatable finding vulnerabilities workflow. advanced tutorial 35 min
  33. 033 Turning a bug class into a checklist Learn Turning a bug class into a checklist through a safe, repeatable finding vulnerabilities workflow. advanced tutorial 35 min