Скачать или смотреть Injection Attacks 101: SQL Injection, Code Injection, and XSS

This video dives into the world of injection attacks, including SQL injection, code injection, and cross-site scripting (XSS). It explains how these vulnerabilities work, demonstrates practical examples of exploiting them, and discusses the impact of real-world breaches. The video also covers essential prevention techniques, such as input validation and the use of security tools, to protect web applications from these threats.

Open Source Tools
DAST - https://github.com/zaproxy/zaproxy
SAST - https://github.com/PyCQA/bandit, https://github.com/ajinabraham/nodejs...
In-app Firewall: Python - https://github.com/AikidoSec/firewall... Node - https://github.com/AikidoSec/firewall...

Check Out Aikido Security
https://aikido.dev

0:00 intro
0:38 What are injection attacks/vulnerabilities
1:04 SQL injection
4:10 Code Injection
5:27 XSS
8:53 Breaches from injection
10:29 Preventing injection