Let's get started..

Why does it work?

SQL Injection

OS Command Injection

Template Injection

Template Injection

CRLF Injection

How to Protect?

• Proper usage of parameterised queries
• Server-side input validation
• Proper error handling

Reflected XSS

Stored XSS

DOM Based XSS

How to protect?

• Contextual output encoding

https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html

JWT Validation Bypass

• Brute-force JWT Secret
• The None Algorithm
• RS256 to HS256

https://jwt.io/

OAUTH 2.0 Authorization

• https://tools.ietf.org/html/rfc6749

Typical Client-Server Model

• Client authentication involves resource owner's credentials, i.e., resource owner's credentials are shared with third-party clients

OAUTH 2.0 Security Considerations

• Unauthenticated Clients
• Client Impersonation
• Insecure Transmission of Access/Refresh Tokens
• Access/Refresh Token Expiry
• Open Redirection
• Failure to Detect Authorization Code Compromise
• Access Token's (Broad) Scope
• Sensitive Plaitext Information in "state" and "scope"
• Missing CSRF protection for redirection URI (via "state" parameter)
• Injection via "state" and "redirect_uri" parameters

Session Fixation via HTTP

• https://unsecured.nwebsec.com/SessionFixationAttacker

Cross-Site Request Forgery (CSRF)

Insecure Direct Object Reference (IDOR)

Parameter Tampering

• We have been doing this all along, through all our demos.

Insufficient Cryptography

• Poor key management
• Use of custom encryption protocols
• Use of insecure algorithms

Enable HTTP Strict Transport Security (HSTS) Policy

• Prevent Cookie Hijacking
• Prevent SSL/TLS downgrade attacks

Content Security Policy (CSP)

Prevent Click-jacking

Amazon Cognito Misconfiguration

• https://slides.com/riddhishreechaurasia/null-bangalore-vyapi#/4/9
• https://github.com/riddhi-shree/knowledge-sharing/blob/master/Mobile/Android/amazon_cognito_authz_issue/README.md