CYBER OFFENSE AND DEFENSE

Course Information

Lecturer: Mario Alviano

Office hours: consult my homepage

Microsoft Teams: for code and link search on this page

Notice Board

25/08/2023 10:30: New site!

09/10/2023 08:45: No lecture on Tuesday 21 November.

16/10/2023 14:25: No lecture on Thursday 2 November.

05/12/2023 09:45: No lecture on Tuesday 19 December.

Promo Videos (most recent up)

Pills (most recent up)

Dates and Deadlines

Lectures

Thursday and Friday in room MT10

1. Introduction ⌛⌛⌛

2. SQL injection (SQLi) - part 1 ⌛⌛

3. SQL injection (SQLi) - part 2 ⌛⌛⌛

4. Authentication ⌛⌛

5. Business logic vulnerabilities ⌛⌛⌛

6. Information disclosure + Directory traversal ⌛⌛

7. Python requests + lxml + rich + typer ⌛⌛⌛

8. Command injection ⌛⌛

9. File upload vulnerabilities + Exercises ⌛⌛⌛

10. Access control ⌛⌛

11. Server-side request forgery (SSRF) + XXE injection ⌛⌛⌛

12. Cross-site scripting (XSS) - part 1 ⌛⌛⌛

13. Cross-site scripting (XSS) - part 2 ⌛⌛

14. Seminaries ⌛⌛⌛

15. Cross-site request forgery (CSRF) ⌛⌛⌛

16. Cross-origin resource sharing (CORS) ⌛⌛

17. Clickjacking ⌛⌛

18. Insecure deserialization + Server-side template injection ⌛⌛⌛

19. OAuth authentication ⌛⌛

20. JWT attacks + Student Project ⌛⌛⌛

21. Student Project ⌛⌛

22. Student Project ⌛⌛⌛

23. Exam Simulation + Student Project ⌛⌛

24. Student Project Showcase ⌛⌛

Teaching Material

Books

• Computer Security: Principles and Practice, Global Edition - Stallings William and Brown Lawrie - Pearson

  • Sicurezza dei computer e delle reti - Stallings William – Pearson

  • Crittografia - Stallings William – Pearson

• Kali Linux Penetration Testing Bible - Gus Khawaja – Wiley

• Bug Bounty Bootcamp – Vickie Li – No Starch Press

Links

• https://portswigger.net/web-security/learning-path

• https://www.zaproxy.org/

• https://github.com/Textualize/rich

• https://typer.tiangolo.com/

• Basics

  • https://www.w3schools.com/python/

  • https://www.w3schools.com/sql/default.asp

  • https://www.w3schools.com/js/default.asp

  • https://www.w3schools.com/php/default.asp

Exams

Dates will be added to the calendar when available