RedSec
32 lessons

Injection

SQL, command, template, LDAP, and deserialization injection fundamentals.

  1. 001 SQL injection mental model Learn SQL injection mental model through a safe, repeatable injection workflow. intro tutorial 20 min
  2. 002 Command injection guardrails Learn Command injection guardrails through a safe, repeatable injection workflow. intro tutorial 20 min
  3. 003 Server-side template injection concepts Learn Server-side template injection concepts through a safe, repeatable injection workflow. intro tutorial 20 min
  4. 004 LDAP injection basics Learn LDAP injection basics through a safe, repeatable injection workflow. intro tutorial 20 min
  5. 005 NoSQL query injection Learn NoSQL query injection through a safe, repeatable injection workflow. intro tutorial 20 min
  6. 006 XML external entity review Learn XML external entity review through a safe, repeatable injection workflow. intro tutorial 20 min
  7. 007 Deserialization risk overview Learn Deserialization risk overview through a safe, repeatable injection workflow. intro reference 12 min
  8. 008 Header injection and response splitting Learn Header injection and response splitting through a safe, repeatable injection workflow. intro tutorial 20 min
  9. 009 Path traversal fundamentals Learn Path traversal fundamentals through a safe, repeatable injection workflow. core lab 30 min
  10. 010 Parameterized query patterns Learn Parameterized query patterns through a safe, repeatable injection workflow. core tutorial 20 min
  11. 011 SQL injection boolean based testing Learn SQL injection boolean based testing through a safe, repeatable injection workflow. core tutorial 20 min
  12. 012 SQL injection time based testing Learn SQL injection time based testing through a safe, repeatable injection workflow. core tutorial 20 min
  13. 013 SQL injection UNION concepts Learn SQL injection UNION concepts through a safe, repeatable injection workflow. core tutorial 20 min
  14. 014 Blind SQL injection workflow Learn Blind SQL injection workflow through a safe, repeatable injection workflow. core reference 12 min
  15. 015 Second order SQL injection Learn Second order SQL injection through a safe, repeatable injection workflow. core tutorial 20 min
  16. 016 Command injection separators Learn Command injection separators through a safe, repeatable injection workflow. core tutorial 20 min
  17. 017 Command injection environment control Learn Command injection environment control through a safe, repeatable injection workflow. core tutorial 20 min
  18. 018 Command injection without output Learn Command injection without output through a safe, repeatable injection workflow. core lab 30 min
  19. 019 Template injection sandbox escapes in labs Learn Template injection sandbox escapes in labs through a safe, repeatable injection workflow. core tutorial 20 min
  20. 020 Jinja template injection concepts Learn Jinja template injection concepts through a safe, repeatable injection workflow. core tutorial 20 min
  21. 021 Handlebars template injection concepts Learn Handlebars template injection concepts through a safe, repeatable injection workflow. core reference 12 min
  22. 022 NoSQL operator injection Learn NoSQL operator injection through a safe, repeatable injection workflow. core tutorial 20 min
  23. 023 MongoDB query selector review Learn MongoDB query selector review through a safe, repeatable injection workflow. core tutorial 20 min
  24. 024 XPath injection basics Learn XPath injection basics through a safe, repeatable injection workflow. core tutorial 20 min
  25. 025 LDAP filter injection review Learn LDAP filter injection review through a safe, repeatable injection workflow. core tutorial 20 min
  26. 026 XML entity expansion risks Learn XML entity expansion risks through a safe, repeatable injection workflow. advanced tutorial 35 min
  27. 027 YAML deserialization risks Learn YAML deserialization risks through a safe, repeatable injection workflow. advanced lab 45 min
  28. 028 Java deserialization concepts Learn Java deserialization concepts through a safe, repeatable injection workflow. advanced reference 12 min
  29. 029 PHP object injection concepts Learn PHP object injection concepts through a safe, repeatable injection workflow. advanced tutorial 35 min
  30. 030 CRLF injection in headers Learn CRLF injection in headers through a safe, repeatable injection workflow. advanced tutorial 35 min
  31. 031 Log injection and parser confusion Learn Log injection and parser confusion through a safe, repeatable injection workflow. advanced tutorial 35 min
  32. 032 CSV injection for spreadsheet exports Learn CSV injection for spreadsheet exports through a safe, repeatable injection workflow. advanced tutorial 35 min