Lecture 10

A&D of Network Security - Lab 3

A&D of Network Security - Lab 12

Lecture 8

Simple Web - 0x09(Lab - Simple Note)

AIS3 Pre-Exam 2023

fatal: Authentication failed for https://github.com/{username}/{repository}.git/

Description

初次使用gitbash push repo時可能會遇到這個問題，有些舊版可能會pop up叫user filled with username/password，但那是非常早期的authentication method，現在需要利用GPG/SSH-Key的方式處理

1
2
3

$ git push
remote: Invalid username or token. Password authentication is not supported for Git operations.
fatal: Authentication failed for 'https://github.com/<username>/<repo-name>.git/'

Lab: Exploiting blind XXE to retrieve data via error messages

Lab: Exploiting blind XXE to exfiltrate data using a malicious external DTD

Lab: Blind XXE with out-of-band interaction

Lab: Blind XXE with out-of-band interaction via XML parameter entities

Lab: Using application functionality to exploit insecure deserialization

Lab: Exploiting Java deserialization with Apache Commons

Lecture 6

NTU CNS Final Project Proposal

Lab: Modifying serialized data types

Lab: Arbitrary object injection in PHP

Deserialization - APPRENTICE

Lab: CSRF where token is tied to non-session cookie

Lecture 4

XXE - APPRENTICE

Lab: Exploiting XXE via image file upload

Lab: Exploiting XInclude to retrieve files

XSS - APPRENTICE

Lab: Stored DOM XSS

Lab: DOM XSS in document.write sink using source location.search inside a select element

SQLi - APPRENTICE

Lab: SQL injection attack, querying the database type and version on Oracle

Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft

Lab: SQL injection attack, listing the database contents on non-Oracle databases