From the course: ASP.NET MVC 5 Identity: Authentication and Authorization
Unlock the full course today
Join today to access over 24,800 courses taught by industry experts.
Common vulnerabilities in applications
From the course: ASP.NET MVC 5 Identity: Authentication and Authorization
Common vulnerabilities in applications
- [Instructor] Securing web applications is an ever-increasing subject, both in importance and in scope. With every new feature on a web application, we open ourselves to new vulnerabilities. But which are some of the most common ones? Object binding is when a user sends nested objects, when sending a request to the server. Dangerous uploaded file type is when the user uploads dangerous ASPX files or other types of files. Excessive authentication attempts is attempting to guess the password by sending endless requests. XSS filter evasion is inputting malicious JavaScript code into text boxes or forms. Inclusion of third-party scripts is adding dangerous code into third-party CDNs. Cross-site request forgery happens when unauthorized commands are transmitted from a user that the application trusts. And the last one, which is the open redirect vulnerability, is a case when we redirect the user, after he has provided…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.