Asp.Net Core Security. Novice To Consecrated

Learn to think like ethical hacker about your ASP.NET application security

What you'll learn

Learn about ASP and .NET built-in security mechanisms

Enforce Transport Layer Security and HSTS to prevent network sniffing

Write code in Razor syntax to prevent malicious script implant injection

Familiarize with GET and POST methods in Hyper Text Transfer Protocol (HTTP)

Familiarize with Web Parameter Tampering and Overposting attacks

Create good user password policy for application

Familiarize with Cross-Site Request Forgery (CSRF/XSRF) attacks

Learn what is Open Redirect vulnerability

Simulate Path Traversal attack scenario in laboratory environment

Create honeypot traps in web app to mislead unethical hackers

Use serialization and deserialization mechanisms wisely

Learn about Forced Browsing technique

Requirements

You should have basic understanding of C# language syntax

You should be able to download and run sample ASP and .NET project in Visual Studio

Description

Welcome to ASP.NET Core Security course for .NET 7 and newer!These materials are essential knowledge about ASP.NET built-in protection mechanisms plus we will learn to think like a hacker and this is our first step towards defensive programming and increased security of created applications. In the laboratory we will use sample application in ASP.NET technology with various vulnerabilities to simulate attack scenarios and other experiments.When you look at the course length, then you can see that these materials are knowledge concentrate.We learn how to enforce Transport Layer Security encryption to protect against network traffic sniffing. Next we look at sharp Razor syntax and how it protects us from malicious implant injection. Then we return to fundamentals like GET and POST methods of HTTP and how to create more secure controller actions in ASP and .NET technology.Most of lectures are ethical hacking of our vulnerable application sample.We will experiment with:Parameter Tampering,Overposting Attack,Password Policy,Cross-Site Request Forgery (CSRF/XSRF),Open Redirect Attack,Path Traversal Attack,Honeypot Example,Insecure Deserialization,Forced Browsing Technique and more!Enable Closed Captions (CC) for better accessibility and here we go!Do not forget that you have my online technical assistance.

Overview

Section 1: Introduction

Lecture 1 Introduction

Section 2: ASP.NET Core and MVC Security

Lecture 2 Misconfiguration Protection

Lecture 3 Network Traffic Sniffing

Lecture 4 Malicious Implant Injection

Lecture 5 Safe Methods

Lecture 6 Parameter Tampering

Lecture 7 Password Policy

Lecture 8 Cross-Site Request Forgery (CSRF/XSRF)

Lecture 9 Open Redirect Attack

Lecture 10 Path Traversal Attack

Lecture 11 Honeypot Example

Lecture 12 Insecure Deserialization Mechanism

Lecture 13 Forced Browsing Technique

Section 3: Extras

Lecture 14 Vulnerable ASP.NET App Sample

Students learning ASP that want to focus on security of their apps,Students bored with creating basket for e-commerce web apps,Future cybersecurity specialists,Beginner ASP and .NET developers