Skip to content

willjohnsonio/eggheadio-web-security-essentails

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

26 Commits
01-web-security-course-overview.md
01-web-security-course-overview.md
 
 
02-simulate-session-hijacking-attacks-and-inspect-network-traffic-with-charles-proxy.md
02-simulate-session-hijacking-attacks-and-inspect-network-traffic-with-charles-proxy.md
 
 
03-express-add-https-to-a-localhost-express-app-to-prevent-mitm-attacks.md
03-express-add-https-to-a-localhost-express-app-to-prevent-mitm-attacks.md
 
 
04-egghead-redirect-all-http-traffic-to-https-in-express-to-ensure-all-responses-are-secure.md
04-egghead-redirect-all-http-traffic-to-https-in-express-to-ensure-all-responses-are-secure.md
 
 
05-set-the-secure-cookie-flag-to-ensure-cookies-are-only-sent-over-secure-connections.md
05-set-the-secure-cookie-flag-to-ensure-cookies-are-only-sent-over-secure-connections.md
 
 
06-add-hsts-headers-to-express-apps-to-ensure-all-requests-are-secure.md
06-add-hsts-headers-to-express-apps-to-ensure-all-requests-are-secure.md
 
 
07-egghead-create-a-proof-of-concept-exploit-of-a-csrf-vulnerable-website.md
07-egghead-create-a-proof-of-concept-exploit-of-a-csrf-vulnerable-website.md
 
 
08-egghead-mitigate-csrf-attacks-by-setting-the-samesite-cookie-flag-in-express.md
08-egghead-mitigate-csrf-attacks-by-setting-the-samesite-cookie-flag-in-express.md
 
 
09-add-csrf-token-middleware-to-an-express-server-to-mitigate-csrf.md
09-add-csrf-token-middleware-to-an-express-server-to-mitigate-csrf.md
 
 
10-gghead-make-an-xss-payload-to-read-a-cookie-from-a-vulnerable-website.md
10-gghead-make-an-xss-payload-to-read-a-cookie-from-a-vulnerable-website.md
 
 
11-set-the-httponly-cookie-flag-in-express-to-ensure-cookies-are-inaccessible-from-javascript.md
11-set-the-httponly-cookie-flag-in-express-to-ensure-cookies-are-inaccessible-from-javascript.md
 
 
12-make-ac-xss-payload-to-read-documentbody-from-a-vulnerable-website.md
12-make-ac-xss-payload-to-read-documentbody-from-a-vulnerable-website.md
 
 
13-prepare-a-vulnerable-website-for-csp-enforcement-with-report-only-csp-headers-in-express.md
13-prepare-a-vulnerable-website-for-csp-enforcement-with-report-only-csp-headers-in-express.md
 
 
14-read-document-content-from-a-vulnerable-website-via-script-tag-injection-in-an-xss-payload.md
14-read-document-content-from-a-vulnerable-website-via-script-tag-injection-in-an-xss-payload.md
 
 
15-add-a-nonce-based-script-src-header-in-express-to-only-allow-scripts-that-match-the-nonce.md
15-add-a-nonce-based-script-src-header-in-express-to-only-allow-scripts-that-match-the-nonce.md
 
 
16-prompt-users-for-credentials-from-a-vulnerable-website-via-iframe-injection.md
16-prompt-users-for-credentials-from-a-vulnerable-website-via-iframe-injection.md
 
 
17-add-a-default-src-csp-header-in-express-to-enforce-an-allowlist-and-mitigate-xss.md
17-add-a-default-src-csp-header-in-express-to-enforce-an-allowlist-and-mitigate-xss.md
 
 
EGH_WebSecurity.png
EGH_WebSecurity.png
 
 
README.md
README.md
 
 

Repository files navigation

Web Security Essentails

Community Notes for Mike Sherov's eggheadio course on Web Security

Feel free to make a PR to add notes and resources!

About

Notes for Mike Sherov's eggheadio course on Web Security

Resources

Readme
Activity

Stars

34 stars

Watchers

2 watching

Forks

5 forks
Report repository

Releases

No releases published

Packages

No packages published

Contributors 2

  •  
  •