Course

Identifying areas of HTML5 vulnerability

How to identify and assess the most common HTML5 vulnerabilities and methods of HTML5 based attack on web applications?
1 hour, 9 minutes 5 videos
Start a Free Trial

Course description

This course will teach you the most common types of attack arising from insecure HTML5 code and the methods used by hackers to exploit them.

Syllabus

Attack Methods HTML

File - 00:10:00
The HTML files you will need for this course.
Social engineering

Video - 00:09:00
Methods such as email spoofing and social media scanning used by hackers to find access points within a web application.
Data leaks

Video - 00:06:00
Potential exposure of data through insecure storage.
Denial of service (DDOS)

Video - 00:10:00
Preventing legitimate users from accessing your application by flooding your resources with requests.
Script injection

Video - 00:16:00
How hackers can use your HTML5 elements against you by injecting their own scripts.
Brute force

Video - 00:18:00
The use of brute force to gain unauthorized access to admin areas of a web application.

Meet the author

Robert Morel is a Computer Science graduate, working as Head of Application Security for a large Enterprise. Previously Robert worked as a SecOps Engineer for a leading cryptocurrency futures exchange and prior to this a Senior web developer and IT security officer.

While at university, Robert started his own web development company. His first website was a static HTML site advertising a plumber. His student prices attracted business, and by the end of university, he had a team of five specializing in developing angular single-page applications and training courses.

Most of Robert’s work since then has been within fintech and blockchain. His first role after university involved migrating large financial data sets from legacy silos onto the blockchain, using Java. Working in fintech, he became an expert in developing secure and hardened web applications. Through this, he also became an experienced security researcher and ethical hacker, as well as a fintech author and blogger.

One of Robert’s favorite parts of working in web app security is having the opportunity to work with penetration testers and bug bounty hunters. Managing, assessing and resolving security reports has taught him more than ever about vulnerabilities and exploits. In his spare time, Robert enjoys developing web-scraping applications, practicing the violin and Chinese calligraphy.

Learn More

Unlock 7 days of free training

  • 1,400+ hands-on courses and labs
  • Certification practice exams
  • Skill assessments
Start a Free Trial

Plans & pricing

Infosec Skills Personal

$299 / year

Buy Now 7-Day Free Trial
  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

Book a Meeting
  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps

Award-winning training you can trust