Vulnerabilities

Vulnerabilities

Now that you are familar with how the Unsecure PWA works, it is time to start understanding some of the common vulnerabilties found in web apps.
The following interactive lessons will give you a primer on each concept, but you will have use a variety of testing techniques (black box, grey box, white box) to discover if the app is vulnerable in any of the following ways.

For now, go through the interactive lessons and research each topic.
In your assessment task you can then describe to the client some of the vulnerabilities you are looking for.

• Structured query language (SQL) injection

• cross-site scripting (XSS)

• cross-site forgery request (CSRF)

• invalid forwarding and redirecting

• memory management

• session mismanagement

• broken authentication

• race conditions