JSON Injection - Python AppSec (by Duo Sec) - Veracode Security Labs Community Edition (free)

Описание

Video walkthrough for part 4 (JSON Injection) of the "Python AppSec (by Duo Security)" topic in Veracode Security Labs Community Edition (free) - Hope you enjoy ?

↢Social Media↣
Twitter: https://twitter.com/_CryptoCat
GitHub: https://github.com/Crypto-Cat
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn: https://www.linkedin.com/in/cryptocat
Reddit: https://www.reddit.com/user/_CryptoCat23
YouTube: https://www.youtube.com/CryptoCat23
Twitch: https://www.twitch.tv/cryptocat23

↢Resources↣
https://www.veracode.com/events/hacker-games
https://securitylabs-ce.veracode.com/
https://snyk.io/blog/python-security-best-practices-cheat-sheet/
https://vulncat.fortify.com/en/detail?id=desc.dataflow.java.json_injection
https://portswigger.net/web-security/dom-based/client-side-json-injection
https://www.acunetix.com/blog/web-security-zone/what-are-json-injections/
https://github.com/enygma/h2-json-injection

↢Chapters↣
Start - 0:00
The Basics of JSON - 0:25
Handling JSON - 4:40
Performing the attack - 8:08
Fixing the Issue - JSON Parsing - 13:45
Fixing the Issue - JavaScript Eval() - 16:44