Advanced Server-Side Attacks

Master the skills of advanced server-side attacks, covering SSRF, File Inclusions, Deserialization, Race Conditions, and Prototype Pollution.

This module will focus on advanced server-side attack techniques an attacker uses to compromise a web app. We will learn to detect and mitigate SSRF vulnerabilities, followed by threats posed by prototype pollution and how attackers can exploit them. We will cover a range of topics, including file inclusion vulnerabilities through PHP wrappers, session files, and log poisoning. We will also learn about particular attack vectors like race conditions where simultaneous access to shared resources can lead to unpredictable behaviour. Finally, we will understand attack techniques during the deserialisation process that may allow attackers to execute malicious code on servers. Upon completing the module, you will have the skills to understand advanced server-side attack techniques attackers utilise to weaken web app security. All the rooms are equipped with realistic scenarios and real-world application examples that provide practical insights into the exploitation and mitigation of server-side vulnerabilities.