Hack Yourself First: How to go on the Cyber-Offense

Hack Yourself First is all about developers building up cyber-offense skills and proactively seeking out security vulnerabilities in their own websites before an attacker does.

The prevalence of online attacks against websites has accelerated quickly in recent years and the same risks continue to be readily exploited. However, these are very often easily identified directly within the browser; it's just a matter of understanding the vulnerable patterns to look for. This course comes at security from the view of the attacker in that their entry point is typically the browser. They have a website they want to probe for security risks – this is how they go about it. This approach is more reflective of the real online threat than reviewing source code is and it empowers developers to begin immediately assessing their applications even when they're running in a live environment without access to the source. After all, that's what online attackers are doing.

• Introduction 25mins
• Transport Layer Protection 68mins
• Cross Site Scripting (XSS) 57mins
• Cookies 45mins
• Internal Implementation Disclosure 69mins
• Parameter Tampering 91mins
• SQL Injection 76mins
• Cross Site Attacks 60mins
• Account Management 70mins