SIGPwny About Meetings Publications Events Sponsors

Week 14: MPC (Multi-Party Computation)Week 14: Supply Chain Attacks & PolicyWeek 12: Location-Based OSINTWeek 12: Symbolic ExecutionWeek 10: Japan House SocialWeek 10: AI HackingWeek 09: Linux Kernel ExploitationWeek 09: Tracer FIREWeek 09: Block and Stream CiphersWeek 09: WiCyS Cryptography CTFWeek 07: Esoteric LanguagesWeek 06: Password CrackingWeek 05: BlockchainWeek 04: PWN IV - ROPWeek 03: PWN III - Heap ExploitationWeek 03: ARM AssemblyWeek 02: Intro to PentestingWeek 01: EditorsWeek 00: Hot Cocoa + Board Games SocialWeek 00: Welcome BackWeek 14: Cloud SecurityWeek 14: Web Hacking IIIWeek 12: Python JailsWeek 11: Antivirus and EDR EvasionWeek 10: Ethics and LawWeek 10: Forensics Workshop with CrowdStrikeWeek 09: Workshop with Caesar Creek SoftwareWeek 09: Physical Security and LockpickingWeek 08: PWN IIWeek 08: PWN IWeek 07: Crypto IIWeek 07: Crypto IWeek 06: DRM CircumventionWeek 06: Reverse Engineering IIWeek 05: x86-64 AssemblyWeek 05: Double CTF! BuckeyeCTF 2023 + MapleCTF 2023Week 05: OSINT IWeek 04: Reverse Engineering IWeek 03: Reverse Engineering SetupWeek 03: Web Hacking IIWeek 02: Intro to Terminal and Setup (Session 2)Week 02: PatriotCTF 2023Week 02: Web Hacking IWeek 01: Intro to Terminal and Setup (Session 1)Week 01: Bowling SocialWeek 00: IntroductionWeek 14: Reconnaissance + IoT Security with CypherConWeek 14: Java Reverse EngineeringWeek 13: UIUCTF 2023 PlanningWeek 13: Crypto III: Block CiphersWeek 12: Esoteric LanguagesWeek 11: UEFI Reverse EngineeringWeek 11: Password CrackingWeek 09: AI Hacking IIWeek 09: AI Hacking IWeek 06: FuzzingWeek 06: Quantum ComputingWeek 05: Nintendo DSi Browser HackingWeek 05: Reverse Engineering IIIWeek 04: PWN IV: HeapWeek 04: Pentesting IWeek 03: PWN III: ROPWeek 02: Bypassing macOS Privacy Controls for Fun and ProfitWeek 02: Web Hacking IIIWeek 01: SetupWeek 00: Welcome BackWeek 15: Introduction to Secure ComputationWeek 14: SPR@I: "Machine Learning Threats"Week 14: PWN IIWeek 12: ForensicsWeek 11: SPR@I: "Glyph Positions Break PDF Text Redaction"Week 11: Python JailsWeek 10: SPR@I: "Preventing Large-Scale Cloud Attacks"Week 10: Operational SecurityWeek 09: Physical Security and LockpickingWeek 08: SPR@I: "All Eyes On Me"Week 08: Reverse Engineering IIWeek 07: Crypto IIWeek 07: Crypto IWeek 06: Ethics and LawWeek 06: PWN IWeek 05: x86-64 AssemblyWeek 05: OSINT IWeek 04: Reverse Engineering IWeek 03: Reverse Engineering + Pwn SetupWeek 03: Web Hacking IIWeek 02: How to CTF (CSAW CTF Qualifications 2022)Week 02: Web Hacking IWeek 01: SetupWeek 00: IntroductionWeek 13: AI SecurityWeek 12: Crypto Math II: Lattice AttacksWeek 12: SPR@I: "Lord of the Rings" CPU Side-ChannelWeek 11: RATs with ICCSP, Spray Paint SocialWeek 11: Password CrackingWeek 10: Network and Security Research Group (NSRG)Week 10: UIUC Technology Services Cybersecurity AMAWeek 09: UIUCTF 2022 Planning IIWeek 09: Security CareersWeek 07: Social EventWeek 06: Intro to PentestingWeek 05: Crypto Math IWeek 05: Windows EnvironmentsWeek 04: IoT Security (Paper Reading)Week 04: Python JailsWeek 03: RSA FactoringWeek 02: Log4JWeek 02: Format StringsWeek 01: UIUCTF 2022 Planning IWeek 01: ROP (Return Oriented Programming)Week 00: Fall Research Show and TellWeek 00: Welcome BackWeek 14: Mobile Application HackingWeek 14: Java Reverse EngineeringWeek 12: Recursive MeetingWeek 11: Wireless SecurityWeek 11: NetworkingWeek 10: OSINT IIWeek 10: OSINT IWeek 09: SIGPwny Spooky SummaryWeek 09: ForensicsWeek 08: The Big RickWeek 08: Physical Security (Lockpicking)Week 07: PWN IIWeek 07: PWN IWeek 06: Reverse Engineering IIWeek 06: Reverse Engineering IWeek 05: Law and EthicsWeek 05: Operational SecurityWeek 04: Crypto IIWeek 04: Crypto IWeek 03: CSAW CTF Qualifications 2021 RecapWeek 03: Web Hacking IIWeek 02: Web Hacking IWeek 01: TerminalWeek 01: TutorialWeek 00: SetupWeek 00: IntroductionWeek 12: How to Make CTF ChallengesWeek 11: DockerWeek 10: HackIllinois... Literally! (Workshop)Week 09: Recursive MeetingWeek 08: Pwny RacingWeek 07: Reverse Engineering ToolsWeek 06: Basics of CryptographyWeek 05: Dynamic Linking and GOT/PLTWeek 04: Ethereum Security (Paper Reading)Week 04: Sandbox/Jail EscapesWeek 03: Heap Exploitation II and III, Show and TellWeek 02: Web Hacking: Path Traversal and SSRFWeek 00: Heap Exploitation IWeek 14: Web Hacking: XSS and SQL InjectionWeek 12: Wireless SecurityWeek 09: Intro to OpSecWeek 08: Binary Exploitation Help SessionWeek 07: Binary ExploitationWeek 06: Password Cracking and SQL InjectionWeek 04: CLI Tools (R2, tmux, vim)Week 03: TutorialWeek 02: IntroductionWeek 10: Java Reverse EngineeringWeek 06: SQL InjectionWeek 05: LockpickingWeek 04: BashWeek 03: Binary Exploitation (Part 2)Week 02: Binary Exploitation (Part 1)Week 01: Introduction (feat. Purdue) [LEGENDARY]Week 14: DEF CON Talk Watch PartyWeek 12: Discord HackingWeek 11: CSAW CTF Finals 2019 RecapWeek 09: Intro to ForensicsWeek 08: Recursive MeetingWeek 07: Intro to OpSecWeek 06: Intro to CryptoWeek 05: CLI Tools (R2, tmux, vim)Week 04: Web HackingWeek 03: Game HackingWeek 02: Intro to Web (Natas)Week 01: Introduction and SetupWeek 13: Discord HackingWeek 11: Intro to OSINTWeek 10: Intro to RE + PWN with Northrop GrummanWeek 08: DynamoRIOWeek 07: Game HackingWeek 06: Natas Web HackingWeek 04: Linux InfrastructureWeek 03: UnderTheCTFWeek 14: Intro to NetworkingWeek 11: Intro to OpSecWeek 10: Format String VulnerabilitiesWeek 09: Intro to ForensicsWeek 08: Intro to CryptographyWeek 07: Intro to WebWeek 06: Intro to Reverse EngineeringWeek 04: Intro to PWNWeek 03: Intro to Unix and CLIWeek 01: IntroductionWeek 11: Modern Binary ExploitationWeek 10: TF2 LAN PartyWeek 06: Intro to Reverse Engineering (Part 2)Week 05: LockpickingWeek 04: Intro to Reverse Engineering (Part 1)Week 03: CSAW CTF Qualifications 2017 RecapWeek 02: Intro to CTFWeek 01: IntroductionWeek 08: Reverse Engineering (Part 2)Week 07: Reverse Engineering (Part 1)Week 05: Intro to OpSecWeek 04: Intro to CryptoWeek 03: Number Bases (Binary, Hexadecimal, Base64)Week 03: Intro to CTF (Part 2)Week 02: Intro to CTF (Part 1)Week 01: Introduction

Web Hacking III

SP2023 Week 02

web

command injection

ssti

ssrf

Daniel Wang

Daniel Wang,

Louis Asanaka

Louis Asanaka

Thursday, February 2nd, 2023

6–7 PM

Siebel CS 2405 + Zoom

Watch video

Download slides

Sitemap

Home

About

Meetings

Publications

Events

Sponsors

Connect

Discord

GitHub

Instagram

Twitter

YouTube

© 2024 SIGPwny. ACM@UIUC is a 501(c)(3) non-profit organization. Site source on GitHub.