oldlamb

@UCh0-HWtvOf6H-Z3xPvbRHpQ - 612 subscribers

Home Videos Live Playlists

Setting Up GoPhish for Anonymous Phishing in 2024 (Well, almost anonymous...)

Setting Up GoPhish for Anonymous Phishing in 2024 (Well, almost anonymous...) oldlamb

1.8K views - 2 years ago

CPSA Mastery: Part 1 - Soft Skills & Core Technical Skills Aligned with CREST

CPSA Mastery: Part 1 - Soft Skills & Core Technical Skills Aligned with CREST oldlamb

2.3K views - 2 years ago

Lab: Limit overrun race conditions

Lab: Limit overrun race conditions oldlamb

108 views - 2 years ago

Linux Fundamentals (The Shell, Workflow)

Linux Fundamentals (The Shell, Workflow) oldlamb

197 views - 2 years ago

Practice exam: App 2

Practice exam: App 2 oldlamb

2.9K views - 2 years ago

Lab: CORS vulnerability with trusted insecure protocols

Lab: CORS vulnerability with trusted insecure protocols oldlamb

280 views - 2 years ago

Lab: CORS vulnerability with trusted null origin

Lab: CORS vulnerability with trusted null origin oldlamb

251 views - 2 years ago

Lab: CORS vulnerability with basic origin reflection

Lab: CORS vulnerability with basic origin reflection oldlamb

151 views - 2 years ago

ATutor Authentication Bypass and RCE (Gaining Remote Code Execution - 3.10.6)

ATutor Authentication Bypass and RCE (Gaining Remote Code Execution - 3.10.6) oldlamb

437 views - 3 years ago

ATutor Authentication Bypass and RCE (Gaining Remote Code Execution - 3.10.5)

ATutor Authentication Bypass and RCE (Gaining Remote Code Execution - 3.10.5) oldlamb

158 views - 3 years ago

File Inclusion oldlamb

490 views - 3 years ago

SQL Injection Fundamentals

SQL Injection Fundamentals oldlamb

4.4K views - 3 years ago

JavaScript Deobfuscation

JavaScript Deobfuscation oldlamb

2K views - 3 years ago

Attacking Web Applications with Ffuf

Attacking Web Applications with Ffuf oldlamb

3.5K views - 3 years ago

ATutor Authentication Bypass and RCE (Bypassing File Upload Restrictions - 3.9.1)

ATutor Authentication Bypass and RCE (Bypassing File Upload Restrictions - 3.9.1) oldlamb

206 views - 3 years ago

Lab: JWT authentication bypass via algorithm confusion

Lab: JWT authentication bypass via algorithm confusion oldlamb

873 views - 3 years ago

Lab: JWT authentication bypass via jku header injection

Lab: JWT authentication bypass via jku header injection oldlamb

367 views - 3 years ago

Lab: JWT authentication bypass via algorithm confusion with no exposed key

Lab: JWT authentication bypass via algorithm confusion with no exposed key oldlamb

318 views - 3 years ago

Lab: JWT authentication bypass via kid header path traversal

Lab: JWT authentication bypass via kid header path traversal oldlamb

566 views - 3 years ago

Lab: JWT authentication bypass via jwk header injection

Lab: JWT authentication bypass via jwk header injection oldlamb

478 views - 3 years ago

Lab: JWT authentication bypass via weak signing key

Lab: JWT authentication bypass via weak signing key oldlamb

1.5K views - 3 years ago

Lab: JWT authentication bypass via flawed signature verification

Lab: JWT authentication bypass via flawed signature verification oldlamb

515 views - 3 years ago

Lab: JWT authentication bypass via unverified signature

Lab: JWT authentication bypass via unverified signature oldlamb

657 views - 3 years ago

Introduction to Web Applications

Introduction to Web Applications oldlamb

2.2K views - 3 years ago

ATutor Authentication Bypass and RCE (Authentication Gone Bad - 3.8.1)

ATutor Authentication Bypass and RCE (Authentication Gone Bad - 3.8.1) oldlamb

374 views - 3 years ago

ATutor Authentication Bypass and RCE (Subverting the ATutor Authentication - 3.7.1 - 3.7.2)

ATutor Authentication Bypass and RCE (Subverting the ATutor Authentication - 3.7.1 - 3.7.2) oldlamb

142 views - 3 years ago

ATutor Authentication Bypass and RCE (Data Exfiltration - 3.6.4)

ATutor Authentication Bypass and RCE (Data Exfiltration - 3.6.4) oldlamb

98 views - 3 years ago

ATutor Authentication Bypass and RCE (Data Exfiltration - 3.6.3)

ATutor Authentication Bypass and RCE (Data Exfiltration - 3.6.3) oldlamb

86 views - 3 years ago

ATutor Authentication Bypass and RCE (Initial Vulnerability Discovery - 3.3.1)

ATutor Authentication Bypass and RCE (Initial Vulnerability Discovery - 3.3.1) oldlamb

427 views - 3 years ago

Web Requests oldlamb

14.1K views - 3 years ago

A little something to get you started

A little something to get you started oldlamb

46 views - 3 years ago

Practice exam: App 1

Practice exam: App 1 oldlamb

3.7K views - 3 years ago

Lab: SSRF via OpenID dynamic client registration

Lab: SSRF via OpenID dynamic client registration oldlamb

220 views - 3 years ago

Lab: Stealing OAuth access tokens via an open redirect

Lab: Stealing OAuth access tokens via an open redirect oldlamb

69 views - 3 years ago

Lab: OAuth account hijacking via redirect_uri

Lab: OAuth account hijacking via redirect_uri oldlamb

586 views - 3 years ago

Lab: Forced OAuth profile linking oldlamb

64 views - 3 years ago

Lab: Authentication bypass via OAuth implicit flow

Lab: Authentication bypass via OAuth implicit flow oldlamb

62 views - 3 years ago

Lab: SSRF via flawed request parsing

Lab: SSRF via flawed request parsing oldlamb

197 views - 3 years ago

Lab: Routing-based SSRF

Lab: Routing-based SSRF oldlamb

248 views - 3 years ago

Lab: Web cache poisoning via ambiguous requests

Lab: Web cache poisoning via ambiguous requests oldlamb

217 views - 3 years ago

Lab: Web cache poisoning via an unkeyed query parameter

Lab: Web cache poisoning via an unkeyed query parameter oldlamb

150 views - 3 years ago

Lab: Web cache poisoning via an unkeyed query string

Lab: Web cache poisoning via an unkeyed query string oldlamb

92 views - 3 years ago

Lab: Targeted web cache poisoning using an unknown header

Lab: Targeted web cache poisoning using an unknown header oldlamb

83 views - 3 years ago

Lab: Web cache poisoning with multiple headers

Lab: Web cache poisoning with multiple headers oldlamb

76 views - 3 years ago

Lab: Web cache poisoning with an unkeyed cookie

Lab: Web cache poisoning with an unkeyed cookie oldlamb

65 views - 3 years ago

Lab: Web cache poisoning with an unkeyed header

Lab: Web cache poisoning with an unkeyed header oldlamb

154 views - 3 years ago

Lab: Basic password reset poisoning

Lab: Basic password reset poisoning oldlamb

134 views - 3 years ago

Lab: Host header authentication bypass

Lab: Host header authentication bypass oldlamb

123 views - 3 years ago

Lab: Authentication bypass via encryption oracle

Lab: Authentication bypass via encryption oracle oldlamb

207 views - 3 years ago

Lab: Infinite money logic flaw

Lab: Infinite money logic flaw oldlamb

58 views - 3 years ago

Lab: Authentication bypass via flawed state machine

Lab: Authentication bypass via flawed state machine oldlamb

36 views - 3 years ago

Lab: Insufficient workflow validation

Lab: Insufficient workflow validation oldlamb

8 views - 3 years ago

Lab: Weak isolation on dual-use endpoint

Lab: Weak isolation on dual-use endpoint oldlamb

9 views - 3 years ago

Lab: Exploiting Ruby deserialization using a documented gadget chain

Lab: Exploiting Ruby deserialization using a documented gadget chain oldlamb

428 views - 3 years ago

Lab: Inconsistent handling of exceptional input

Lab: Inconsistent handling of exceptional input oldlamb

24 views - 3 years ago

Lab: Low-level logic flaw

Lab: Low-level logic flaw oldlamb

34 views - 3 years ago

Lab: Flawed enforcement of business rules

Lab: Flawed enforcement of business rules oldlamb

4 views - 3 years ago

Lab: Inconsistent security controls

Lab: Inconsistent security controls oldlamb

12 views - 3 years ago

Lab: High-level logic vulnerability

Lab: High-level logic vulnerability oldlamb

14 views - 3 years ago

Lab: Excessive trust in client-side controls

Lab: Excessive trust in client-side controls oldlamb

24 views - 3 years ago