05:15

Lab: Web Cache Poisoning with URL Normalization

09:01

Lab: Web cache poisoning via a fat GET request

09:23

Lab: Web Cache Poisoning with Parameter Cloaking

06:21

Lab: Web cache poisoning via an unkeyed query parameter

06:05

Lab: Web cache poisoning via an unkeyed query string

22:13

Lab: Combining web cache poisoning vulnerabilities

09:04

Lab: Exploit a DOM vulnerability via a cache with strict cacheability criteria

07:32

Lab: Targeted web cache poisoning using an unknown header

11:02

Lab: Web cache poisoning with multiple headers

07:00

Lab: Web cache poisoning with an unkeyed cookie

09:00

Lab: Web cache poisoning with an unkeyed header

11:09

Lab: Server-side pause-based request smuggling

05:40

Lab: CL.0 request smuggling

11:29

Lab: Confirming a TE.CL vulnerability via differential responses – HTTP Request Smuggling

08:08

Lab: Confirming a CL.TE vulnerability via differential responses – HTTP Request Smuggling

17:55

Lab: Client-Side Desync

10:34

Lab: Web cache poisoning via HTTP/2 request tunnelling

13:27

Lab: Bypassing access controls via HTTP/2 request tunnelling

05:50

Lab: HTTP/2 request splitting via CRLF injection

09:19

Lab: HTTP/2 request smuggling via CRLF injection

07:45

Lab: Response Queue Poisoning via H2.TE request smuggling

10:52

Lab: H2.CL request smuggling

06:08

Lab: Exploiting HTTP request smuggling to perform web cache deception

08:30

Lab: Exploiting HTTP request smuggling to perform web cache poisoning

06:17

Lab: Exploiting HTTP request smuggling to deliver reflected XSS

13:05

Lab: Exploiting HTTP request smuggling to capture other users' requests

08:17

Lab: Exploiting HTTP request smuggling to reveal front-end request rewriting

08:19

Lab: Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability

07:52

Lab: Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vulnerability

06:28

Lab: HTTP request smuggling, basic CL.TE vulnerability

09:20

Lab: HTTP request smuggling, obfuscating the TE header

14:16

Lab: HTTP request smuggling, basic TE.CL vulnerability

10:14

Lab: SameSite Strict BYPASS via sibling domain (no Burp Collaborator needed!)

06:55

Lab: Cross-Site WebSocket Hijacking (no Burp Collaborator needed!)

09:02

Lab: CSRF with SameSite Strict BYPASS via client-side redirect

06:05

Lab: CSRF with SameSite Lax BYPASS via method override

04:25

Lab: Exploit DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded

08:44

Lab: DOM XSS in jQuery selector sink & hashchange event