This episode of The Cyber Threat Perspective dives into the details of injection attacks, featuring real-world pen test stories and practical prevention tips. Brad and Jordan break down the OWASP Top 10 No.5 risk and explain why it’s still a major concern for organizations.
- What injection vulnerabilities are and why they matter
- Deep dive into cross-site scripting (XSS), including reflected, stored, and DOM-based types
- SQL injection and other data-layer manipulation examples
- Real-world pen test war stories with breakdowns of business logic and OS command injection
- Actionable strategies to prevent injection attacks using input validation, whitelists, and parameterized queries
Need a web app pen test or have questions about application security? Reach out to the SecurIT360 team.
Work with Us: https://securit360.com
Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov