|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/exploiting-race-conditions-in-web-applications/
课程评论：没有评论
课程名称：利用网络应用中的竞争条件 课程概述：竞争条件攻击是现代网络应用中最危险且被低估的攻击之一。尽管许多人认为这种攻击在实际应用中无法被利用，但事实恰恰相反。在本课程中，您将学习竞争条件攻击的工作原理。您将看到，一个账户余额为1000美元的攻击者如何通过竞争条件攻击转移超过1000美元的资金，以及如何多次重用一次性折扣码。课程通过逐步演示展示这些攻击的实际应用，帮助您理解竞争条件的利用方式。此外，您还将学习如何检查您的网络应用是否易受竞争条件攻击的影响，并学习防范这些攻击的方法。最后，我将讨论一些经典的竞争条件攻击案例，包括Facebook、Starbucks和HackerOne等一些全球知名公司的漏洞。这些漏洞最终被伦理黑客发现和报告。希望这门课程能引起您的兴趣，我期待在课堂上见到您！
A race condition attack is one of the most dangerous and underestimated attacks in modern web applications. Many people claim that this attack is not exploitable in real-world applications, but they are wrong. In this course, you'll learn how a race condition attack works. You'll see how the attacker, who has $1000 in his bank account, can transfer more than $1000 from his bank account as a result of a race condition attack. You'll also see how the attacker can reuse a one-time discount code many times as a result of a race condition attack. These attacks will be presented step by step in the demos so that you can see how race condition exploitation works in practice. What's more - you'll learn how to check if your web applications are vulnerable to race condition attacks and you'll also learn how to prevent these attacks from happening.Last but not least - I'll discuss case studies of award-winning race condition attacks. You'll see that some of the greatest companies in the world (e.g. Facebook, Starbucks, and HackerOne) were vulnerable to these attacks and fortunately for these companies these bugs were detected and reported by ethical hackers. I hope this sounds good to you and I can't wait to see you in the class.
