This lab will focus on security problems that cannot be solved by software updates. We choose some common website security issues as examples. After analyzing root cause of issues. First try to modify the code from the inside to solve the problem, and try to solve the problem. Block the problem from the outside, and use a series of implementations to understand the common handling methods of vulnerabilities in practice and the impact on the original service. The goal is to help who are begin to fix security issues after completing a vulnerability scan or penetration test.
Knowing the solutions to common security issues and the impact of different methods on the service will help you better understand which solution to choose when you encounter other security issues in the future.
1. Introduction common website security issues
2. Solve problems from the inside
3. Solve problems from the outside
4. Summary and discussion
A linux system or virtual machine that can run docker.
Basic programming and website architecture.
Cymetrics Senior Security Engineer
Currently a security engineer at Cymetrics. I spent a lot of time in solving various information security issues in the past.
For analyze these security issues and the use of hackers, I was forced to learn variety of programming languages.
Because of the complexity of what I have learned, I have recently begun to organize and share relevant experiences in the form of articles.