From the course: ASP.NET MVC 5 Identity: Authentication and Authorization

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Common vulnerabilities in applications

Common vulnerabilities in applications

From the course: ASP.NET MVC 5 Identity: Authentication and Authorization

Start my 1-month free trial

Common vulnerabilities in applications

- [Instructor] Securing web applications is an ever-increasing subject, both in importance and in scope. With every new feature on a web application, we open ourselves to new vulnerabilities. But which are some of the most common ones? Object binding is when a user sends nested objects, when sending a request to the server. Dangerous uploaded file type is when the user uploads dangerous ASPX files or other types of files. Excessive authentication attempts is attempting to guess the password by sending endless requests. XSS filter evasion is inputting malicious JavaScript code into text boxes or forms. Inclusion of third-party scripts is adding dangerous code into third-party CDNs. Cross-site request forgery happens when unauthorized commands are transmitted from a user that the application trusts. And the last one, which is the open redirect vulnerability, is a case when we redirect the user, after he has provided some input. We are going to talk in more details for each of these…

Contents