Skip to main content
Back to course
Log in
Get started
Someone wanted to learn this too, so Grasp built them a personal learning path.
Create your own
Bug bounty hunter learning path
ยท
Module 9
Advanced Server-Side Vulnerabilities
1
Understanding Serialization: How it Works and RCE Risks
Explain how data serialization works and the RCE risks associated with insecure deserialization.
2
Exploiting Insecure Deserialization
Identify and exploit insecure deserialization vulnerabilities in a target application (e.g., Python Pickle).
3
XXE Injection: Manipulating XML Parsers
Identify XML External Entity (XXE) injection vulnerabilities by manipulating XML parsers.
4
XXE for Data Exfiltration and SSRF
Exploit XXE to exfiltrate local files and perform Server-Side Request Forgery (SSRF).
5
Exploiting SSRF for Internal Network Access
Identify and exploit SSRF vulnerabilities to scan internal networks and interact with internal services.
6
Exploiting SSRF: Cloud Metadata Service Attacks
Upgrade a basic SSRF to a more impactful attack by targeting cloud metadata services (e.g., AWS IMDS).
7
Detecting WAFs Through Response Analysis
Identify the presence of a Web Application Firewall (WAF) through response analysis.
8
WAF Evasion Fundamentals
Apply basic WAF bypass techniques for common vulnerabilities like SQLi and XSS.
Previous module
Server-Side Injection & File Inclusion Attacks
Next module
Advanced Web Attacks & API Security