OWASP Top 10: A10:2021-Server-Side Request Forgery (SSRF)

OWASP    |    Intermediate
  • 7 videos | 37m 13s
  • Includes Assessment
  • Earns a Badge
Rating 4.6 of 196 users Rating 4.6 of 196 users (196)
URLs are endpoints for web services that can be accessed remotely. Server-Side Request Forgery (SSRF) attacks target servers and result from attackers leveraging URLs and vulnerable web applications to access sensitive data. Cross-Site Request Forgery (CSRF) attacks target client devices and perform unauthorized actions using authenticated user sessions with web services. In this course, learn about SSRFs. Next, discover how to scan a network for HTTP hosts using Nmap, execute a Cross-Site Request Forgery (CSRF) attack, and run a Denial of Service (DoS) attack against a web server. Finally, practice mitigating controls for SSRFs. Upon completion, you'll be able to mitigate Cross-Site Request Forgery and Server-Side Request Forgery attacks.

WHAT YOU WILL LEARN

  • Discover the key concepts covered in this course
    Recognize how server-side request forgery (ssrf) attacks occur and how to mitigate against them
    Identify active network hosts and services using nmap
    Execute a cross-site request forgery (csrf) attack against a vulnerable web application
  • Run a denial of service (dos) attack against a vulnerable web application
    Implement controls to reduce the potential for server-side request forgery (ssrf) attacks
    Summarize the key concepts covered in this course

IN THIS COURSE

  • 1m 10s
  • 9m 3s
  • Locked
    3.  Performing Network Mapping with Nmap
    7m 8s
  • Locked
    4.  Executing a Cross-site Request Forgery (CSRF) Attack
    5m 45s
  • Locked
    5.  Running a Denial of Service (DoS) Attack
    7m 21s
  • Locked
    6.  Reducing Server-Side Request Forgery (SSRF) Attacks
    6m 7s
  • Locked
    7.  Course Summary
    40s

EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE

Skillsoft is providing you the opportunity to earn a digital badge upon successful completion on some of our courses, which can be shared on any social network or business platform.

Digital badges are yours to keep, forever.

YOU MIGHT ALSO LIKE

Course OWASP Top 10: Securing Web Applications
Rating 4.6 of 1111 users Rating 4.6 of 1111 users (1111)
Course AWS SysOps Associate 2022: Firewall Solutions
Rating 4.7 of 16 users Rating 4.7 of 16 users (16)
Course OWASP Top 10: A08:2021-Software & Data Integrity Failures
Rating 4.6 of 182 users Rating 4.6 of 182 users (182)

PEOPLE WHO VIEWED THIS ALSO VIEWED THESE

Course OWASP Top 10: A08:2021-Software & Data Integrity Failures
Rating 4.6 of 182 users Rating 4.6 of 182 users (182)
Course OWASP Top 10: A03:2021-Injection
Rating 4.6 of 344 users Rating 4.6 of 344 users (344)
Course Intelligent Orchestration: Automating Security Incident Processing
Rating 4.6 of 181 users Rating 4.6 of 181 users (181)