Advanced Web Attacks
Course Description
Go beyond OWASP Top 10. Learn advanced web attacks used in real-world bug bounty and penetration testing.
Course Structure
Modules
Module 1: Deserialization (8h)
- Java deserialization
- PHP object injection
- .NET deserialization
- Python pickle
- Ruby deserialization
Module 2: SSRF Exploitation (7h)
- Basic SSRF
- Blind SSRF
- Protocol smuggling
- Cloud metadata
- SSRF to RCE
Module 3: Race Conditions (5h)
- TOCTOU attacks
- Race condition testing
- Multi-threaded exploitation
- Limit bypass
Module 4: Prototype Pollution (5h)
- JavaScript prototypes
- Client-side pollution
- Server-side pollution
- Gadget chains
Module 5: HTTP Request Smuggling (7h)
- CL.TE attacks
- TE.CL attacks
- TE.TE attacks
- Smuggling for RCE
Module 6: Cache Poisoning (6h)
- Web cache basics
- Unkeyed inputs
- Cache deception
- Distributed poisoning
Module 7: Template Injection (6h)
- SSTI fundamentals
- Engine identification
- Payload development
- SSTI to RCE
Module 8: Business Logic (6h)
- 2FA bypass
- Payment manipulation
- Workflow abuse
- State confusion
Tools
| Tool | Purpose |
|---|---|
| Burp Suite | Testing |
| ysoserial | Java deserial |
| SSTImap | Template injection |
| Turbo Intruder | Race conditions |
📄️ Overview
Advanced web exploitation: deserialization, SSRF, race conditions, and prototype pollution