CYBER OFFENSE AND DEFENSE

Course Information

Lecturer: Mario Alviano

Office hours: consult my homepage

Microsoft Teams: for code and link search on this page

Notice Board

10/09/2024 14:50: Schedule is online.

10/09/2024 14:50: No lecture on 10 and 15 October.

10/09/2024 14:50: No lecture on 5 and 7 November.

29/10/2024 14:40: No lecture on 28 November.

15/11/2024 12:40: Online lectures on Saturday 7 December and Saturday 14 December.

19/11/2024 14:40: Lecture on Thursday 21 in room MT12.

Promo Videos (most recent up)

Pills (most recent up)

Dates and Deadlines

Lectures

Thursday and Friday in room MT10

1. Introduction ⌛⌛⌛

2. SQL injection (SQLi) - part 1 ⌛⌛

3. SQL injection (SQLi) - part 2 ⌛⌛⌛

4. Authentication ⌛⌛

5. Business logic vulnerabilities ⌛⌛⌛

6. Information disclosure + Directory traversal ⌛⌛

7. Command injection + File upload vulnerabilities ⌛⌛⌛

8. Access control ⌛⌛

9. Server-side request forgery (SSRF) + XXE injection ⌛⌛⌛

10. Cross-site scripting (XSS) ⌛⌛

11. Exercises on Cross-site scripting (XSS) ⌛⌛⌛

12. Cross-site request forgery (CSRF) ⌛⌛

13. Cross-origin resource sharing (CORS) ⌛⌛⌛

14. Clickjacking ⌛⌛

15. Insecure deserialization ⌛⌛⌛

16. Server-side template injection ⌛⌛⌛

17. OAuth authentication ⌛⌛

18. Student Project ⌛⌛⌛

19. JWT attacks ⌛⌛⌛

20. Student Project ⌛⌛

21. Student Project ⌛⌛⌛⌛

22. Exam Simulation ⌛⌛⌛

23. Student Project Showcase ⌛⌛

Teaching Material

Books

• Computer Security: Principles and Practice, Global Edition - Stallings William and Brown Lawrie - Pearson

  • Sicurezza dei computer e delle reti - Stallings William – Pearson

  • Crittografia - Stallings William – Pearson

• Kali Linux Penetration Testing Bible - Gus Khawaja – Wiley

• Bug Bounty Bootcamp – Vickie Li – No Starch Press

Links

• https://portswigger.net/web-security/learning-path

• https://www.zaproxy.org/

• https://github.com/Textualize/rich

• https://typer.tiangolo.com/

• Basics

  • https://www.w3schools.com/python/

  • https://www.w3schools.com/sql/default.asp

  • https://www.w3schools.com/js/default.asp

  • https://www.w3schools.com/php/default.asp

Exams

Dates will be added to the calendar when available