Unprotected admin functionality with unpredictable URL (Video solution)

Pauls erstes Video :-)

JWT Lab04

JWT Lab01

JWT Lab05

JWT Lab07

JWT Lab02

JWT Lab08

JWT Lab06

JWT Lab03

CSRF where token is duplicated in cookie (Audio, Explanations)

CSRF where token is duplicated in cookie (Audio, Comments)

CSRF vulnerability with no defenses (Video solution, Audio)

CSRF with broken Referer validation (Video solution, Audio)

CSRF where Referer validation depends on header being present (Video solution, Audio)

CSRF where token is tied to non-session cookie (Video solution, Audio)

CSRF where token validation depends on token being present (Video solution, Audio)

CSRF where token is not tied to user session (Video solution, Audio)

CSRF where token validation depends on request method (Video solution, Audio)

Excessive trust in client side controls (Video solution, Audio)

High level logic vulnerability (Video solution, Audio)

Inconsistent handling of exceptional input (Video solution, Audio)

Flawed enforcement of business rules (Video solution, Audio)

Low level logic flaw (Video solution, Audio)

Weak isolation on dual use endpoint (Video solution, Audio)