Attacks
Each lesson explains one attack, runs it in a simulator you can pause and tune, then shows what stops it.
- Lessons
- 15
- With simulators
- 12
Web4
- SQL injectionCoreSlip your own query into a form field and read data you should not see.Simulator
- Cross-site scriptingCoreGet a page to run an attacker's script in a visitor's browser.Simulator
- Cross-site request forgeryCoreTrick a logged-in browser into sending a request the user never meant to make.
- Command injectionCoreMake a server run shell commands hidden inside ordinary input.Simulator
Network4
- Man-in-the-middleCoreSit between two parties, read their traffic and change it in flight.Simulator
- DNS spoofingCorePoison a name lookup so a trusted address leads somewhere else.Simulator
- DDoSIntroFlood a service with traffic from many sources until real users cannot get in.Simulator
- Wi-Fi crackingAdvancedCapture a handshake and test it offline against a wordlist.Simulator