Udemy - The Ultimate Web Application Bug Bounty Hunting Course 2026-3

Creation Time	July 21, 2026, 2:19 a.m.
Last Access Time	July 21, 2026, 7:35 p.m.
File Size	7.2 GB
Keywords	Web Hunting Course - Udemy Application Ultimate Bounty 2026-3 The Bug
Total Requests	10
Total Files	364
Magnet Link	Please wait ...
	Download (Magnet Link) Play (Watch Online)

02. Cross-site scripting (XSS)/1. XSS Methodology.mp4 195.3 MB
04. Open Redirect/1. Open Redirect Methodology.mp4 132.8 MB
09. Insecure Direct Object References (IDOR)/1. Insecure Direct Object References (IDOR) Methodology.mp4 116.6 MB
07. SQL injection/1. SQL injection Methodology.mp4 113.1 MB
25. Methodology to find most bugs/1. Bug Finding Methodology.mp4 112.0 MB
14. Cross-origin resource sharing (CORS)/1. Cross-origin resource sharing (CORS) Methodology.mp4 102.4 MB
26. Mystery Labs/2. Mystery Lab 2.mp4 101.0 MB
26. Mystery Labs/6. Mystery Lab 6.mp4 99.7 MB
06. Server-side request forgery (SSRF)/1. Server-side request forgery (SSRF) Methodology.mp4 99.6 MB
16. Registration flaws/1. Registration flaws Methodology.mp4 98.3 MB
21. Analysis of the core application/1. Analysis of the core application Methodology.mp4 97.7 MB
20. Developer tools flaws/1. Developer tools Methodology.mp4 95.5 MB
15. Business logic vulnerabilities/13. Authentication bypass via encryption oracle.mp4 95.3 MB
05. Bypassing Access Control/1. Bypassing Access Control Methodology.mp4 95.1 MB
03. Cross-site request forgery (CSRF)/1. CSRF Methodology.mp4 95.1 MB
26. Mystery Labs/3. Mystery Lab 3.mp4 93.1 MB
15. Business logic vulnerabilities/1. Business logic vulnerabilities Methodology.mp4 92.4 MB
27. AI Automation/1. AI Automation.mp4 88.1 MB
12. File upload vulnerabilities/1. File upload vulnerabilities Methodology.mp4 83.6 MB
10. XML external entity (XXE) injection/1. XML external entity (XXE) injection Methodology.mp4 79.6 MB
19. Updating account flaws/1. Updating account Methodology.mp4 78.6 MB
13. Java Script analysis/6. Java Script Lab 4.mp4 78.0 MB
07. SQL injection/20. Visible error-based SQL injection.mp4 77.8 MB
11. API Testing/1. API Methodology.mp4 76.6 MB
07. SQL injection/13. Blind SQL injection with conditional responses.mp4 76.4 MB
03. Cross-site request forgery (CSRF)/7. CSRF where token is tied to non-session cookie.mp4 73.5 MB
26. Mystery Labs/1. Mystery Lab 1.mp4 73.0 MB
07. SQL injection/14. Blind SQL injection with conditional errors.mp4 67.7 MB
13. Java Script analysis/3. Java Script Lab 1.mp4 67.3 MB
26. Mystery Labs/5. Mystery Lab 5.mp4 66.2 MB
22. Payment feature flaws/1. Payment feature Methodology.mp4 64.6 MB
01. Introduction/3. How I set up Burp.mp4 64.3 MB
13. Java Script analysis/5. Java Script Lab 3.mp4 63.2 MB
24. Directory Traversal/1. Directory Traversal Methodology.mp4 62.9 MB
13. Java Script analysis/1. Java Script analysis Methodology.mp4 62.6 MB
15. Business logic vulnerabilities/7. Low-level logic flaw.mp4 61.7 MB
15. Business logic vulnerabilities/12. Infinite money logic flaw.mp4 60.4 MB
03. Cross-site request forgery (CSRF)/10. SameSite Strict bypass via client-side redirect.mp4 58.9 MB
07. SQL injection/3. SQL injection vulnerability in WHERE clause allowing retrieval of hidden data.mp4 57.0 MB
07. SQL injection/11. SQL injection attack, listing the database contents on non-Oracle databases.mp4 56.9 MB
26. Mystery Labs/4. Mystery Lab 4.mp4 56.3 MB
02. Cross-site scripting (XSS)/18. Exploiting XSS to perform CSRF.mp4 55.2 MB
07. SQL injection/16. Blind SQL injection with time delays and information retrieval.mp4 54.9 MB
12. File upload vulnerabilities/8. Remote code execution via polyglot web shell upload.mp4 52.2 MB
02. Cross-site scripting (XSS)/12. DOM XSS in document.write sink using source location.search inside a select elem.mp4 49.7 MB
17. Login flaws/1. Login flaws Methodology.mp4 49.3 MB
04. Open Redirect/3. Open Redirect Lab 1.mp4 48.7 MB
04. Open Redirect/6. Open Redirect Lab 4.mp4 47.9 MB
02. Cross-site scripting (XSS)/4. Stored XSS into HTML context with nothing encoded.mp4 47.6 MB
18. Password reset flaws/1. Password reset flaws Methodology.mp4 47.6 MB
14. Cross-origin resource sharing (CORS)/3. CORS vulnerability with basic origin reflection.mp4 47.3 MB
09. Insecure Direct Object References (IDOR)/4. IDOR Lab 2.mp4 46.5 MB
03. Cross-site request forgery (CSRF)/11. SameSite Strict bypass via sibling domain.mp4 45.5 MB
14. Cross-origin resource sharing (CORS)/4. CORS vulnerability with trusted null origin.mp4 45.5 MB
02. Cross-site scripting (XSS)/8. DOM XSS in jQuery selector sink using a hashchange event.mp4 45.2 MB
14. Cross-origin resource sharing (CORS)/5. CORS vulnerability with trusted insecure protocols.mp4 44.8 MB
02. Cross-site scripting (XSS)/19. Reflected XSS into HTML context with most tags and attributes blocked.mp4 44.1 MB
02. Cross-site scripting (XSS)/14. Reflected DOM XSS.mp4 43.8 MB
03. Cross-site request forgery (CSRF)/8. CSRF where token is duplicated in cookie.mp4 43.5 MB
07. SQL injection/9. SQL injection attack, querying the database type and version on Oracle.mp4 43.2 MB
03. Cross-site request forgery (CSRF)/6. CSRF where token is not tied to user session.mp4 42.9 MB
07. SQL injection/12. SQL injection attack, listing the database contents on Oracle.mp4 42.8 MB
02. Cross-site scripting (XSS)/10. Stored XSS into anchor href attribute with double quotes HTML-encoded.mp4 42.7 MB
03. Cross-site request forgery (CSRF)/3. CSRF vulnerability with no defenses.mp4 42.3 MB
09. Insecure Direct Object References (IDOR)/5. IDOR Lab 3.mp4 41.8 MB
04. Open Redirect/4. Open Redirect Lab 2.mp4 41.4 MB
02. Cross-site scripting (XSS)/22. Reflected XSS in canonical link tag.mp4 41.3 MB
02. Cross-site scripting (XSS)/25. Stored XSS into onclick event with angle brackets and double quotes HTML-encoded.mp4 40.3 MB
12. File upload vulnerabilities/3. Remote code execution via web shell upload.mp4 39.9 MB
02. Cross-site scripting (XSS)/15. Stored DOM XSS.mp4 39.3 MB
13. Java Script analysis/4. Java Script Lab 2.mp4 39.2 MB
07. SQL injection/7. SQL injection UNION attack, retrieving data from other tables.mp4 38.0 MB
10. XML external entity (XXE) injection/5. Blind XXE with out-of-band interaction.mp4 37.5 MB
24. Directory Traversal/3. File path traversal, simple case.mp4 37.5 MB
02. Cross-site scripting (XSS)/9. Reflected XSS into attribute with angle brackets HTML-encoded.mp4 36.5 MB
18. Password reset flaws/5. Basic password reset poisoning.mp4 36.4 MB
06. Server-side request forgery (SSRF)/5. SSRF with blacklist-based input filter.mp4 36.3 MB
07. SQL injection/17. Blind SQL injection with out-of-band interaction.mp4 36.1 MB
10. XML external entity (XXE) injection/7. Exploiting blind XXE to exfiltrate data using a malicious external DTD.mp4 35.7 MB
07. SQL injection/18. Blind SQL injection with out-of-band data exfiltration.mp4 35.5 MB
06. Server-side request forgery (SSRF)/3. Basic SSRF against the local server.mp4 35.5 MB
12. File upload vulnerabilities/4. Web shell upload via Content-Type restriction bypass.mp4 35.2 MB
15. Business logic vulnerabilities/4. High-level logic vulnerability.mp4 35.1 MB
02. Cross-site scripting (XSS)/5. DOM XSS in document.write sink using source location.search.mp4 35.1 MB
12. File upload vulnerabilities/5. Web shell upload via path traversal.mp4 35.1 MB
05. Bypassing Access Control/12. Method-based access control can be circumvented.mp4 34.9 MB
15. Business logic vulnerabilities/8. Inconsistent handling of exceptional input.mp4 34.6 MB
08. OS command injection/1. OS command injection Methodology.mp4 34.6 MB
02. Cross-site scripting (XSS)/11. Reflected XSS into a JavaScript string with angle brackets HTML encoded.mp4 34.3 MB
03. Cross-site request forgery (CSRF)/14. CSRF with broken Referer validation.mp4 34.2 MB
15. Business logic vulnerabilities/9. Weak isolation on dual-use endpoint.mp4 34.2 MB
05. Bypassing Access Control/8. User ID controlled by request parameter, with unpredictable user IDs.mp4 33.5 MB
02. Cross-site scripting (XSS)/13. DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encod.mp4 33.5 MB
05. Bypassing Access Control/14. Referer-based access control.mp4 33.4 MB
02. Cross-site scripting (XSS)/16. Exploiting cross-site scripting to steal cookies.mp4 33.3 MB
05. Bypassing Access Control/11. URL-based access control can be circumvented.mp4 33.3 MB
07. SQL injection/8. SQL injection UNION attack, retrieving multiple values in a single column.mp4 33.2 MB
18. Password reset flaws/4. Password reset poisoning via middleware.mp4 32.9 MB
06. Server-side request forgery (SSRF)/6. SSRF with filter bypass via open redirection vulnerability.mp4 32.8 MB
02. Cross-site scripting (XSS)/21. Reflected XSS with some SVG markup allowed.mp4 32.8 MB
23. Premium feature flaws/1. Premium feature Methodology.mp4 32.6 MB
10. XML external entity (XXE) injection/4. Exploiting XXE to perform SSRF attacks.mp4 32.5 MB
10. XML external entity (XXE) injection/3. Exploiting XXE using external entities to retrieve files.mp4 32.4 MB
06. Server-side request forgery (SSRF)/4. Basic SSRF against another back-end system.mp4 32.1 MB
15. Business logic vulnerabilities/6. Flawed enforcement of business rules.mp4 31.8 MB
02. Cross-site scripting (XSS)/3. Reflected XSS into HTML context with nothing encoded.mp4 31.4 MB
02. Cross-site scripting (XSS)/24. Reflected XSS into a JavaScript string with angle brackets and double quotes HTM.mp4 31.3 MB
03. Cross-site request forgery (CSRF)/9. SameSite Lax bypass via method override.mp4 30.8 MB
03. Cross-site request forgery (CSRF)/12. SameSite Lax bypass via cookie refresh.mp4 30.6 MB
07. SQL injection/4. SQL injection vulnerability allowing login bypass.mp4 30.3 MB
07. SQL injection/6. SQL injection UNION attack, finding a column containing text.mp4 30.2 MB
02. Cross-site scripting (XSS)/23. Reflected XSS into a JavaScript string with single quote and backslash escaped.mp4 29.9 MB
02. Cross-site scripting (XSS)/7. DOM XSS in jQuery anchor href attribute sink using location.search source.mp4 29.6 MB
08. OS command injection/5. Blind OS command injection with output redirection.mp4 29.3 MB
10. XML external entity (XXE) injection/10. Exploiting XXE via image file upload.mp4 29.2 MB
05. Bypassing Access Control/13. Multi-step process with no access control on one step.mp4 29.0 MB
10. XML external entity (XXE) injection/8. Exploiting blind XXE to retrieve data via error messages.mp4 29.0 MB
15. Business logic vulnerabilities/10. Insufficient workflow validation.mp4 28.8 MB
02. Cross-site scripting (XSS)/26. Reflected XSS into a template literal with angle brackets, single, double quotes.mp4 28.4 MB
07. SQL injection/19. SQL injection with filter bypass via XML encoding.mp4 28.2 MB
10. XML external entity (XXE) injection/9. Exploiting XInclude to retrieve files.mp4 28.1 MB
09. Insecure Direct Object References (IDOR)/6. IDOR Lab 4.mp4 27.7 MB
07. SQL injection/15. Blind SQL injection with time delays.mp4 27.2 MB
09. Insecure Direct Object References (IDOR)/3. IDOR Lab 1.mp4 27.1 MB
12. File upload vulnerabilities/6. Web shell upload via extension blacklist bypass.mp4 26.6 MB
03. Cross-site request forgery (CSRF)/4. CSRF where token validation depends on request method.mp4 26.3 MB
01. Introduction/2. What you will learn.mp4 26.2 MB
10. XML external entity (XXE) injection/6. Blind XXE with out-of-band interaction via XML parameter entities.mp4 26.0 MB
24. Directory Traversal/6. File path traversal, traversal sequences stripped with superfluous URL-decode.mp4 25.7 MB
15. Business logic vulnerabilities/11. Authentication bypass via flawed state machine.mp4 25.6 MB
24. Directory Traversal/8. File path traversal, validation of file extension with null byte bypass.mp4 25.4 MB
05. Bypassing Access Control/7. User ID controlled by request parameter.mp4 25.2 MB
15. Business logic vulnerabilities/3. Excessive trust in client-side controls.mp4 25.2 MB
05. Bypassing Access Control/6. User role can be modified in user profile.mp4 25.1 MB
04. Open Redirect/5. Open Redirect Lab 3.mp4 24.8 MB
02. Cross-site scripting (XSS)/17. Exploiting cross-site scripting to capture passwords.mp4 24.8 MB
07. SQL injection/10. SQL injection attack, querying the database type and version on MySQL and MS.mp4 24.8 MB
05. Bypassing Access Control/10. User ID controlled by request parameter with password disclosure.mp4 24.7 MB
08. OS command injection/3. OS command injection, simple case.mp4 24.4 MB
03. Cross-site request forgery (CSRF)/13. CSRF where Referer validation depends on header being present.mp4 23.8 MB
02. Cross-site scripting (XSS)/6. DOM XSS in innerHTML sink using source location.search.mp4 23.6 MB
03. Cross-site request forgery (CSRF)/5. CSRF where token validation depends on token being present.mp4 23.3 MB
24. Directory Traversal/5. File path traversal, traversal sequences stripped non-recursively.mp4 23.0 MB
07. SQL injection/5. SQL injection UNION attack, determining the number of columns returned.mp4 22.5 MB
24. Directory Traversal/7. File path traversal, validation of start of path.mp4 22.1 MB
05. Bypassing Access Control/4. Unprotected admin functionality with unpredictable URL.mp4 21.2 MB
05. Bypassing Access Control/9. User ID controlled by request parameter with data leakage in redirect.mp4 20.5 MB
24. Directory Traversal/4. File path traversal, traversal sequences blocked with absolute path bypass.mp4 20.5 MB
18. Password reset flaws/3. Password reset broken logic.mp4 19.8 MB
05. Bypassing Access Control/5. User role controlled by request parameter.mp4 19.8 MB
08. OS command injection/7. Blind OS command injection with out-of-band data exfiltration.mp4 19.4 MB
08. OS command injection/4. Blind OS command injection with time delays.mp4 19.3 MB
12. File upload vulnerabilities/7. Web shell upload via obfuscated file extension.mp4 19.3 MB
02. Cross-site scripting (XSS)/20. Reflected XSS into HTML context with all tags blocked except custom ones.mp4 18.8 MB
08. OS command injection/6. Blind OS command injection with out-of-band interaction.mp4 18.3 MB
06. Server-side request forgery (SSRF)/7. Blind SSRF with out-of-band detection.mp4 18.3 MB
15. Business logic vulnerabilities/5. Inconsistent security controls.mp4 16.9 MB
05. Bypassing Access Control/3. Unprotected admin functionality.mp4 15.1 MB
09. Insecure Direct Object References (IDOR)/2. IDOR.pdf 1.3 MB
02. Cross-site scripting (XSS)/2. XSS.pdf 1.3 MB
03. Cross-site request forgery (CSRF)/2. CSRF.pdf 1.2 MB
04. Open Redirect/2. OPEN REDIRECT.pdf 1.2 MB
14. Cross-origin resource sharing (CORS)/2. CORS.pdf 1.1 MB
06. Server-side request forgery (SSRF)/2. SSRF.pdf 1.1 MB
11. API Testing/2. API.pdf 1.1 MB
10. XML external entity (XXE) injection/2. XXE.pdf 1.0 MB
13. Java Script analysis/2. JAVASCRIPT.pdf 1.0 MB
12. File upload vulnerabilities/2. FILE-UPLOADS.pdf 1.0 MB
07. SQL injection/2. SQLI.pdf 1.0 MB
05. Bypassing Access Control/2. ACCESS CONTROL.pdf 979.2 KB
08. OS command injection/2. OS COMMAND INJECTION.pdf 939.5 KB
24. Directory Traversal/2. DIRECTORY-TRAVERSAL.pdf 841.7 KB
22. Payment feature flaws/2. PAYMENT-FEATURES.pdf 808.3 KB
16. Registration flaws/2. REGISTRATION.pdf 805.6 KB
19. Updating account flaws/2. UPDATING-ACCOUNT.pdf 802.5 KB
20. Developer tools flaws/2. DEVELOPER-TOOLS.pdf 788.2 KB
25. Methodology to find most bugs/2. METHODOLOGY.pdf 774.7 KB
21. Analysis of the core application/2. CORE-FEATURES.pdf 772.2 KB
15. Business logic vulnerabilities/2. BUSINESS-LOGIC.pdf 771.2 KB
18. Password reset flaws/2. PASSWORD-RESET.pdf 764.1 KB
23. Premium feature flaws/2. PREMIUM-FEATURES.pdf 760.2 KB
17. Login flaws/2. LOGIN.pdf 738.4 KB
27. AI Automation/1. webapp-bugbounty-skill.zip 45.3 KB
02. Cross-site scripting (XSS)/1. XSS Methodology.vtt 27.4 KB
04. Open Redirect/1. Open Redirect Methodology.vtt 17.6 KB
25. Methodology to find most bugs/1. Bug Finding Methodology.vtt 15.5 KB
07. SQL injection/1. SQL injection Methodology.vtt 15.3 KB
09. Insecure Direct Object References (IDOR)/1. Insecure Direct Object References (IDOR) Methodology.vtt 15.2 KB
21. Analysis of the core application/1. Analysis of the core application Methodology.vtt 13.9 KB
20. Developer tools flaws/1. Developer tools Methodology.vtt 13.4 KB
16. Registration flaws/1. Registration flaws Methodology.vtt 13.4 KB
14. Cross-origin resource sharing (CORS)/1. Cross-origin resource sharing (CORS) Methodology.vtt 13.3 KB
03. Cross-site request forgery (CSRF)/1. CSRF Methodology.vtt 12.9 KB
06. Server-side request forgery (SSRF)/1. Server-side request forgery (SSRF) Methodology.vtt 12.5 KB
15. Business logic vulnerabilities/1. Business logic vulnerabilities Methodology.vtt 12.4 KB
05. Bypassing Access Control/1. Bypassing Access Control Methodology.vtt 12.1 KB
12. File upload vulnerabilities/1. File upload vulnerabilities Methodology.vtt 11.8 KB
26. Mystery Labs/2. Mystery Lab 2.vtt 11.7 KB
01. Introduction/3. How I set up Burp.vtt 11.7 KB
15. Business logic vulnerabilities/13. Authentication bypass via encryption oracle.vtt 11.4 KB
11. API Testing/1. API Methodology.vtt 11.2 KB
19. Updating account flaws/1. Updating account Methodology.vtt 10.8 KB
10. XML external entity (XXE) injection/1. XML external entity (XXE) injection Methodology.vtt 10.3 KB
26. Mystery Labs/3. Mystery Lab 3.vtt 9.5 KB
03. Cross-site request forgery (CSRF)/7. CSRF where token is tied to non-session cookie.vtt 9.5 KB
07. SQL injection/20. Visible error-based SQL injection.vtt 9.3 KB
07. SQL injection/13. Blind SQL injection with conditional responses.vtt 9.2 KB
26. Mystery Labs/1. Mystery Lab 1.vtt 9.0 KB
13. Java Script analysis/1. Java Script analysis Methodology.vtt 8.7 KB
04. Open Redirect/3. Open Redirect Lab 1.vtt 8.7 KB
15. Business logic vulnerabilities/12. Infinite money logic flaw.vtt 8.6 KB
13. Java Script analysis/6. Java Script Lab 4.vtt 8.5 KB
03. Cross-site request forgery (CSRF)/10. SameSite Strict bypass via client-side redirect.vtt 8.3 KB
26. Mystery Labs/4. Mystery Lab 4.vtt 8.2 KB
22. Payment feature flaws/1. Payment feature Methodology.vtt 8.0 KB
24. Directory Traversal/1. Directory Traversal Methodology.vtt 7.9 KB
09. Insecure Direct Object References (IDOR)/4. IDOR Lab 2.vtt 7.8 KB
26. Mystery Labs/5. Mystery Lab 5.vtt 7.6 KB
07. SQL injection/14. Blind SQL injection with conditional errors.vtt 7.5 KB
15. Business logic vulnerabilities/7. Low-level logic flaw.vtt 7.2 KB
07. SQL injection/16. Blind SQL injection with time delays and information retrieval.vtt 7.2 KB
17. Login flaws/1. Login flaws Methodology.vtt 7.1 KB
14. Cross-origin resource sharing (CORS)/5. CORS vulnerability with trusted insecure protocols.vtt 6.8 KB
07. SQL injection/11. SQL injection attack, listing the database contents on non-Oracle databases.vtt 6.8 KB
02. Cross-site scripting (XSS)/8. DOM XSS in jQuery selector sink using a hashchange event.vtt 6.8 KB
02. Cross-site scripting (XSS)/19. Reflected XSS into HTML context with most tags and attributes blocked.vtt 6.7 KB
13. Java Script analysis/3. Java Script Lab 1.vtt 6.7 KB
12. File upload vulnerabilities/8. Remote code execution via polyglot web shell upload.vtt 6.5 KB
03. Cross-site request forgery (CSRF)/3. CSRF vulnerability with no defenses.vtt 6.4 KB
03. Cross-site request forgery (CSRF)/11. SameSite Strict bypass via sibling domain.vtt 6.4 KB
14. Cross-origin resource sharing (CORS)/3. CORS vulnerability with basic origin reflection.vtt 6.4 KB
02. Cross-site scripting (XSS)/18. Exploiting XSS to perform CSRF.vtt 6.3 KB
18. Password reset flaws/1. Password reset flaws Methodology.vtt 6.2 KB
14. Cross-origin resource sharing (CORS)/4. CORS vulnerability with trusted null origin.vtt 6.2 KB
09. Insecure Direct Object References (IDOR)/5. IDOR Lab 3.vtt 6.2 KB
04. Open Redirect/4. Open Redirect Lab 2.vtt 6.1 KB
02. Cross-site scripting (XSS)/4. Stored XSS into HTML context with nothing encoded.vtt 6.0 KB
07. SQL injection/12. SQL injection attack, listing the database contents on Oracle.vtt 5.9 KB
07. SQL injection/3. SQL injection vulnerability in WHERE clause allowing retrieval of hidden data.vtt 5.9 KB
02. Cross-site scripting (XSS)/12. DOM XSS in document.write sink using source location.search inside a select elem.vtt 5.9 KB
05. Bypassing Access Control/12. Method-based access control can be circumvented.vtt 5.9 KB
04. Open Redirect/6. Open Redirect Lab 4.vtt 5.9 KB
03. Cross-site request forgery (CSRF)/6. CSRF where token is not tied to user session.vtt 5.8 KB
15. Business logic vulnerabilities/8. Inconsistent handling of exceptional input.vtt 5.8 KB
12. File upload vulnerabilities/3. Remote code execution via web shell upload.vtt 5.8 KB
02. Cross-site scripting (XSS)/5. DOM XSS in document.write sink using source location.search.vtt 5.7 KB
03. Cross-site request forgery (CSRF)/8. CSRF where token is duplicated in cookie.vtt 5.7 KB
13. Java Script analysis/5. Java Script Lab 3.vtt 5.6 KB
02. Cross-site scripting (XSS)/14. Reflected DOM XSS.vtt 5.6 KB
02. Cross-site scripting (XSS)/25. Stored XSS into onclick event with angle brackets and double quotes HTML-encoded.vtt 5.6 KB
07. SQL injection/18. Blind SQL injection with out-of-band data exfiltration.vtt 5.6 KB
07. SQL injection/17. Blind SQL injection with out-of-band interaction.vtt 5.5 KB
10. XML external entity (XXE) injection/7. Exploiting blind XXE to exfiltrate data using a malicious external DTD.vtt 5.5 KB
02. Cross-site scripting (XSS)/22. Reflected XSS in canonical link tag.vtt 5.3 KB
06. Server-side request forgery (SSRF)/3. Basic SSRF against the local server.vtt 5.2 KB
02. Cross-site scripting (XSS)/10. Stored XSS into anchor href attribute with double quotes HTML-encoded.vtt 5.2 KB
15. Business logic vulnerabilities/6. Flawed enforcement of business rules.vtt 5.1 KB
03. Cross-site request forgery (CSRF)/9. SameSite Lax bypass via method override.vtt 5.0 KB
03. Cross-site request forgery (CSRF)/12. SameSite Lax bypass via cookie refresh.vtt 5.0 KB
12. File upload vulnerabilities/5. Web shell upload via path traversal.vtt 5.0 KB
13. Java Script analysis/4. Java Script Lab 2.vtt 4.9 KB
05. Bypassing Access Control/14. Referer-based access control.vtt 4.9 KB
02. Cross-site scripting (XSS)/9. Reflected XSS into attribute with angle brackets HTML-encoded.vtt 4.8 KB
02. Cross-site scripting (XSS)/16. Exploiting cross-site scripting to steal cookies.vtt 4.8 KB
02. Cross-site scripting (XSS)/15. Stored DOM XSS.vtt 4.8 KB
15. Business logic vulnerabilities/9. Weak isolation on dual-use endpoint.vtt 4.7 KB
02. Cross-site scripting (XSS)/21. Reflected XSS with some SVG markup allowed.vtt 4.7 KB
12. File upload vulnerabilities/4. Web shell upload via Content-Type restriction bypass.vtt 4.7 KB
04. Open Redirect/5. Open Redirect Lab 3.vtt 4.7 KB
18. Password reset flaws/4. Password reset poisoning via middleware.vtt 4.6 KB
05. Bypassing Access Control/11. URL-based access control can be circumvented.vtt 4.6 KB
10. XML external entity (XXE) injection/5. Blind XXE with out-of-band interaction.vtt 4.5 KB
06. Server-side request forgery (SSRF)/5. SSRF with blacklist-based input filter.vtt 4.5 KB
15. Business logic vulnerabilities/4. High-level logic vulnerability.vtt 4.5 KB
06. Server-side request forgery (SSRF)/6. SSRF with filter bypass via open redirection vulnerability.vtt 4.5 KB
10. XML external entity (XXE) injection/4. Exploiting XXE to perform SSRF attacks.vtt 4.4 KB
02. Cross-site scripting (XSS)/11. Reflected XSS into a JavaScript string with angle brackets HTML encoded.vtt 4.4 KB
18. Password reset flaws/5. Basic password reset poisoning.vtt 4.4 KB
24. Directory Traversal/3. File path traversal, simple case.vtt 4.4 KB
07. SQL injection/7. SQL injection UNION attack, retrieving data from other tables.vtt 4.4 KB
05. Bypassing Access Control/13. Multi-step process with no access control on one step.vtt 4.4 KB
03. Cross-site request forgery (CSRF)/14. CSRF with broken Referer validation.vtt 4.4 KB
07. SQL injection/4. SQL injection vulnerability allowing login bypass.vtt 4.3 KB
07. SQL injection/8. SQL injection UNION attack, retrieving multiple values in a single column.vtt 4.3 KB
09. Insecure Direct Object References (IDOR)/3. IDOR Lab 1.vtt 4.3 KB
23. Premium feature flaws/1. Premium feature Methodology.vtt 4.2 KB
05. Bypassing Access Control/6. User role can be modified in user profile.vtt 4.2 KB
07. SQL injection/9. SQL injection attack, querying the database type and version on Oracle.vtt 4.2 KB
07. SQL injection/19. SQL injection with filter bypass via XML encoding.vtt 4.2 KB
08. OS command injection/1. OS command injection Methodology.vtt 4.2 KB
10. XML external entity (XXE) injection/3. Exploiting XXE using external entities to retrieve files.vtt 4.1 KB
10. XML external entity (XXE) injection/8. Exploiting blind XXE to retrieve data via error messages.vtt 4.1 KB
02. Cross-site scripting (XSS)/3. Reflected XSS into HTML context with nothing encoded.vtt 4.1 KB
06. Server-side request forgery (SSRF)/4. Basic SSRF against another back-end system.vtt 4.1 KB
03. Cross-site request forgery (CSRF)/4. CSRF where token validation depends on request method.vtt 4.1 KB
05. Bypassing Access Control/8. User ID controlled by request parameter, with unpredictable user IDs.vtt 4.1 KB
10. XML external entity (XXE) injection/10. Exploiting XXE via image file upload.vtt 4.0 KB
10. XML external entity (XXE) injection/6. Blind XXE with out-of-band interaction via XML parameter entities.vtt 4.0 KB
02. Cross-site scripting (XSS)/13. DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encod.vtt 4.0 KB
15. Business logic vulnerabilities/11. Authentication bypass via flawed state machine.vtt 4.0 KB
02. Cross-site scripting (XSS)/24. Reflected XSS into a JavaScript string with angle brackets and double quotes HTM.vtt 3.8 KB
02. Cross-site scripting (XSS)/7. DOM XSS in jQuery anchor href attribute sink using location.search source.vtt 3.8 KB
02. Cross-site scripting (XSS)/23. Reflected XSS into a JavaScript string with single quote and backslash escaped.vtt 3.8 KB
08. OS command injection/5. Blind OS command injection with output redirection.vtt 3.8 KB
15. Business logic vulnerabilities/10. Insufficient workflow validation.vtt 3.7 KB
07. SQL injection/6. SQL injection UNION attack, finding a column containing text.vtt 3.7 KB
18. Password reset flaws/3. Password reset broken logic.vtt 3.7 KB
02. Cross-site scripting (XSS)/17. Exploiting cross-site scripting to capture passwords.vtt 3.6 KB
02. Cross-site scripting (XSS)/6. DOM XSS in innerHTML sink using source location.search.vtt 3.6 KB
05. Bypassing Access Control/7. User ID controlled by request parameter.vtt 3.5 KB
15. Business logic vulnerabilities/3. Excessive trust in client-side controls.vtt 3.5 KB
15. Business logic vulnerabilities/5. Inconsistent security controls.vtt 3.5 KB
07. SQL injection/15. Blind SQL injection with time delays.vtt 3.5 KB
02. Cross-site scripting (XSS)/20. Reflected XSS into HTML context with all tags blocked except custom ones.vtt 3.5 KB
12. File upload vulnerabilities/6. Web shell upload via extension blacklist bypass.vtt 3.5 KB
02. Cross-site scripting (XSS)/26. Reflected XSS into a template literal with angle brackets, single, double quotes.vtt 3.5 KB
24. Directory Traversal/6. File path traversal, traversal sequences stripped with superfluous URL-decode.vtt 3.5 KB
10. XML external entity (XXE) injection/9. Exploiting XInclude to retrieve files.vtt 3.4 KB
05. Bypassing Access Control/10. User ID controlled by request parameter with password disclosure.vtt 3.4 KB
09. Insecure Direct Object References (IDOR)/6. IDOR Lab 4.vtt 3.4 KB
03. Cross-site request forgery (CSRF)/5. CSRF where token validation depends on token being present.vtt 3.3 KB
03. Cross-site request forgery (CSRF)/13. CSRF where Referer validation depends on header being present.vtt 3.2 KB
24. Directory Traversal/5. File path traversal, traversal sequences stripped non-recursively.vtt 3.2 KB
08. OS command injection/3. OS command injection, simple case.vtt 3.2 KB
12. File upload vulnerabilities/7. Web shell upload via obfuscated file extension.vtt 3.0 KB
24. Directory Traversal/8. File path traversal, validation of file extension with null byte bypass.vtt 3.0 KB
05. Bypassing Access Control/5. User role controlled by request parameter.vtt 2.9 KB
05. Bypassing Access Control/9. User ID controlled by request parameter with data leakage in redirect.vtt 2.8 KB
01. Introduction/1. Introduction.html 2.8 KB
08. OS command injection/7. Blind OS command injection with out-of-band data exfiltration.vtt 2.7 KB
08. OS command injection/6. Blind OS command injection with out-of-band interaction.vtt 2.7 KB
24. Directory Traversal/4. File path traversal, traversal sequences blocked with absolute path bypass.vtt 2.7 KB
05. Bypassing Access Control/4. Unprotected admin functionality with unpredictable URL.vtt 2.7 KB
05. Bypassing Access Control/3. Unprotected admin functionality.vtt 2.6 KB
07. SQL injection/10. SQL injection attack, querying the database type and version on MySQL and MS.vtt 2.6 KB
07. SQL injection/5. SQL injection UNION attack, determining the number of columns returned.vtt 2.6 KB
08. OS command injection/4. Blind OS command injection with time delays.vtt 2.5 KB
24. Directory Traversal/7. File path traversal, validation of start of path.vtt 2.5 KB
06. Server-side request forgery (SSRF)/7. Blind SSRF with out-of-band detection.vtt 2.5 KB
02. Cross-site scripting (XSS)/2. XSS Links and Slides.html 2.3 KB
01. Introduction/2. What you will learn.vtt 1.8 KB
06. Server-side request forgery (SSRF)/2. Server-side request forgery (SSRF) Links and Slides.html 1.6 KB
11. API Testing/2. API Links and Slides.html 860 bytes
13. Java Script analysis/2. Java Script analysis Links and Slides.html 850 bytes
12. File upload vulnerabilities/2. File upload vulnerabilities Links and Slides.html 823 bytes
03. Cross-site request forgery (CSRF)/2. CSRF Links and Slides.html 674 bytes
10. XML external entity (XXE) injection/2. XML external entity (XXE) injection Links and Slides.html 666 bytes
04. Open Redirect/2. Open Redirect Links and Slides.html 619 bytes
15. Business logic vulnerabilities/2. Business logic vulnerabilities Links and Slides.html 526 bytes
07. SQL injection/2. SQL injection Links and Slides.html 478 bytes
09. Insecure Direct Object References (IDOR)/2. Insecure Direct Object References (IDOR) Links and Slides.html 466 bytes
08. OS command injection/2. OS command injection Links and Slides.html 374 bytes
24. Directory Traversal/2. Directory Traversal flaws Links and Slides.html 229 bytes
14. Cross-origin resource sharing (CORS)/2. Cross-origin resource sharing (CORS) Links and Slides.html 181 bytes
05. Bypassing Access Control/2. Bypassing Access Control Links and Slides.html 160 bytes
16. Registration flaws/2. Registration flaws Slides.html 52 bytes
17. Login flaws/2. Login flaws Slides.html 52 bytes
18. Password reset flaws/2. Password reset flaws Slides.html 52 bytes
19. Updating account flaws/2. Updating account flaws Slides.html 52 bytes
20. Developer tools flaws/2. Developer tools flaws Slides.html 52 bytes
21. Analysis of the core application/2. Analysis of the core application Slides.html 52 bytes
22. Payment feature flaws/2. Payment feature flaws Slides.html 52 bytes
23. Premium feature flaws/2. Premium feature flaws Slides.html 52 bytes
25. Methodology to find most bugs/2. Bug Finding Slides.html 52 bytes

Udemy - The Ultimate Web Application Bug Bounty Hunting Course 2026-3

File List

Download Torrent

Related Resources

Copyright Infringement