Hey. Welcome back.
In the next few lessons,
we're going to work through some
authentication flaws and WebGoat.
I'm not going to introduce each screencast,
but let me give you an overview of what there is to
come and we'll cover over the next few segments.
Our goal is to evaluate the source code of
WebGoat to locate and remediate the vulnerabilities.
We'll also create or implement
controls to mitigate authentication bypass.
We'll look at the authentication bypass
exploit their web code has to offer,
tips and tricks in Burp Suite,
using a proxy to intercept traffic,
then wrap up by introducing the patch
that'll finally mitigate our authentication bypass.
Finally, we'll look at
some logical errors in code. Does that sound good?
After the series of lessons,
you should be able to note
the pitfalls when authenticating users,
and be able to recall notable instances
where others have failed to authenticate users.
Use only time-tested and
verified mechanisms, and libraries.
We have somebody authentication falls
waiting for us. So let's get started.