All Projects → mike-works → Web Security Fundamentals

mike-works / Web Security Fundamentals

Licence: bsd-3-clause
👨‍🏫 Mike's Web Security Course

Programming Languages

javascript
184084 projects - #8 most used programming language

Projects that are alternatives of or similar to Web Security Fundamentals

diwa
A Deliberately Insecure Web Application
Stars: ✭ 32 (-83.59%)
Mutual labels:  xss, csrf, web-security
Hacker101
Source code for Hacker101.com - a free online web and mobile security class.
Stars: ✭ 12,246 (+6180%)
Mutual labels:  xss, web-security, csrf
Penetration testing poc
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
Stars: ✭ 3,858 (+1878.46%)
Mutual labels:  xss, csrf
Hackerone Reports
Top disclosed reports from HackerOne
Stars: ✭ 458 (+134.87%)
Mutual labels:  xss, csrf
Javasecurity
Java web and command line applications demonstrating various security topics
Stars: ✭ 182 (-6.67%)
Mutual labels:  xss, csrf
security-wrapper
对springSecurity进行二次开发,提供OAuth2授权(支持跨域名,多应用授权)、JWT、SSO、文件上传、权限系统无障碍接入、接口防刷、XSS、CSRF、SQL注入、三方登录(绑定,解绑)、加密通信等一系列安全场景的解决方案
Stars: ✭ 21 (-89.23%)
Mutual labels:  xss, csrf
SecExample
JAVA 漏洞靶场 (Vulnerability Environment For Java)
Stars: ✭ 228 (+16.92%)
Mutual labels:  cors, csrf
Resources For Beginner Bug Bounty Hunters
A list of resources for those interested in getting started in bug bounties
Stars: ✭ 7,185 (+3584.62%)
Mutual labels:  xss, web-security
Veneno
Stars: ✭ 230 (+17.95%)
Mutual labels:  xss, web-security
Cazador unr
Hacking tools
Stars: ✭ 95 (-51.28%)
Mutual labels:  xss, csrf
Express Security
nodejs + express security and performance boilerplate.
Stars: ✭ 37 (-81.03%)
Mutual labels:  xss, csrf
Hackvault
A container repository for my public web hacks!
Stars: ✭ 1,364 (+599.49%)
Mutual labels:  xss, web-security
koa-restful-boilerplate
A boilerplate for koa2 RESTful API development
Stars: ✭ 31 (-84.1%)
Mutual labels:  cors, csrf
vulnerabilities
List of every possible vulnerabilities in computer security.
Stars: ✭ 14 (-92.82%)
Mutual labels:  xss, csrf
solutions-bwapp
In progress rough solutions to bWAPP / bee-box
Stars: ✭ 158 (-18.97%)
Mutual labels:  xss, csrf
Corscanner
Fast CORS misconfiguration vulnerabilities scanner🍻
Stars: ✭ 601 (+208.21%)
Mutual labels:  cors, web-security
Blackwidow
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
Stars: ✭ 887 (+354.87%)
Mutual labels:  xss, csrf
Shuriken
Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.
Stars: ✭ 114 (-41.54%)
Mutual labels:  xss, web-security
Xssor2
XSS'OR - Hack with JavaScript.
Stars: ✭ 1,969 (+909.74%)
Mutual labels:  xss, csrf
Sicp Course
SICP Course
Stars: ✭ 179 (-8.21%)
Mutual labels:  course

This is the project used for the Mike.Works Web Security for Web Developers course.

Course outline and slides

What are the pieces?

Getting Set Up

There are a few things you need to ensure you have installed, in order to be ready for this course.

Node.js

You’ll need a relatively recent version (v4.5 or newer, v7 ideally) of node.js installed. On OS X, a great way of doing this without disturbing your existing dev environment is to install NVM. Installation instructions are here.

You’ll know everything is set up properly when you can run

nvm --version # might look like "0.31.4"
node --version # might look like "v7.7.3"

Visual Studio Code

Particularly if you’ve never tried it before, you should install Microsoft Visual Studio Code. Some fantastic extensions that I use regularly include

Check out and setup the project for this workshop

git clone [email protected]:mike-works/web-security-fundamentals.git websec
cd websec
npm install

Troubleshooting

What if I have an older version of Node.js?

You may run into problems during the workshop! An easy way to deal with this is to...

  • install nvm by running
curl -o- https://raw.githubusercontent.com/creationix/nvm/v0.33.4/install.sh | bash

or Wget:

wget -qO- https://raw.githubusercontent.com/creationix/nvm/v0.33.4/install.sh | bash
  • then restart your terminal
  • then run
nvm install stable
nvm use stable
nvm alias default stable

What if I get an error like Please install sqlite3 package manually?

If you use OS X, it can be installed with homebew

brew install sqlite3

Windows and Linux users, please install the appropriate official release.

How to use it

This workshop builds on a single example project, step-by-step. You can start the project by running

npm start

License

While the general license for this project is the BSD 3-clause, the exercises themselves are proprietary and are licensed on a per-individual basis, usually as a result of purchasing a ticket to a public workshop, being a participant in a private training, being a current LinkedIn engineering employee or having a Front End Masters membership.

Here are some guidelines for things that are OK and NOT OK, based on our understanding of how these licenses work:

OK

  • Using everything in this project other than the exercises (or accompanying tests) to build a project used for your own free or commercial training material
  • Copying code from build scripts, configuration files, tests and development harnesses that are not part of the exercises specifically, for your own projects
  • As an owner of an individual license, using code from tests, exercises, or exercise solutions for your own non-training-related project.

NOT OK (without express written consent)

  • Using this project, or any subset of exercises contained within this project to run your own workshops
  • Writing a book that uses the code for these exercises
  • Recording a screencast that contains one or more of this project's exercises

Copyright

© 2018 Mike.Works, All Rights Reserved

This material may not be used for workshops, training, or any other form of instructing or teaching developers, without express written consent
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].