Practical Laravel Security

Course Outline

I believe the best way to learn how to defend against the hackers, is to first learn how to hack (ethically, of course...).

So we start by learning their attacks.

First we'll cover the theory - what is is? How does it work? Why would they use it?

And then you'll learn how to do it yourself! Each attack module will give you hands on practical exercises where you can put your new hacking skills to use!

Of course, there's no point teaching you an attack without also teaching you how to defend against it. So in the Defend modules, I'll teach you exactly what tools you need to protect your site from the attacks you've just learnt.

Attack

1. Cross-Site Scripting (XSS)
   1. Steal Cookies!
   2. Escape Input!
   3. Attribute Magic!
   4. Hijack Formatting!
   5. Markdown Injection!
   6. Script Injection!
   Completed
2. Cross-Site Request Forgery (CSRF)
   1. Send a POST Request!
   2. Replicate a Form!
   3. Submit a Form in the Background!
   4. Bypass SameSite=Lax!
   5. Abusing a Subdomain!
   6. Stealing the CSRF Token!
   Completed
3. SQL Injection (SQLi)
   1. Cliché Login SQLi!
   2. Nested Login SQLi!
   3. Union-Based SQLi!!
   4. Error-Based SQLi!
   5. Blind Error-State SQLi!
   6. Blind Timing-Based SQLi!
   Completed
4. Missing Authorisation
   1. Incremental IDOR!
   2. UUID Leakage!
   3. Incomplete Cryptography!
   4. As Simple As CRUD!
   5. Beware the SPA!
   6. Predictable Hashing!
   Completed
5. Type Juggling
   1. Bypassing Passwords with Integers!
   2. Magic Hashes!
   3. JSON Makes This Easy!
   4. What About Serialization?
   Completed
6. Injection
   1. Path Traversal / Local File Inclusion (LFI)!
   2. Object Manipulation!
   3. PHP Object Deserialisation!
   4. Command Injection
      In progress
7. Remote Code Execution (RCE)
8. Authentication
9. Debug Mode
10. Supply Chain Attacks
11. Browser Security
12. Leaky Data

Defend

1. Escaping Output
   Completed
2. HTML and Markdown
   Completed
3. CSRF Tokens
   Completed
4. SameSite Cookies
   Completed
5. Cross-Origin Resource Sharing (CORS)
   Completed
6. Parameterisation
   Completed
7. Authorisation Policies
   Completed
8. Authorisation Gates
   Completed
9. Signed URLs
   Completed
10. HMAC Hashes
    Completed
11. Strict/Secure Comparisons
    Completed
12. Unserialize Safely
    Completed
13. Input Validation
14. Password Security
15. Rate Limiting
16. Authentication
17. Browser Security Headers
18. Content Security Policy (CSP)
19. Subresource Integrity (SRI)
20. And more...