• Online, Self-Paced
Course Description

Use access techniques to exfiltrate an unprotected facility leftover by developers of a banking website from part of their testing suite to download credentials in the production site and exploit a credential dumping vulnerability.

Learning Objectives

On successful completion of this course, learners should have the knowledge and skills required to:

  • Understand how adversaries can exploit an existing Broken Access Control vulnerability by forced browsing to an area of aside that should be unavailable to the current privilege level, and performing a task, in this case downloading credentials, that should be outside the limits of the user

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.