CompTIA PenTest+ PT0-001 Cert Guide

Chapter 6

Exploiting Application-Based Vulnerabilities

This chapter covers the following subjects:

• Overview of Web Applications for Security Professionals

• How to Build Your Own Web Application Lab

• Understanding Injection-Based Vulnerabilities

• Exploiting Authentication-Based Vulnerabilities

• Exploiting Authorization-Based Vulnerabilities

• Understanding Cross-Site Scripting (XSS) Vulnerabilities

• Understanding Cross-Site Request Forgery Attacks

• Understanding Clickjacking

• Exploiting Security Misconfiguration

• Exploiting File Inclusion Vulnerabilities

• Assessing Insecure Code Practices

Web-based applications are everywhere. You can find them for online retail, banking, enterprise applications, mobile, and Internet of Things (IoT) applications. Thanks ...