Your own second tutorial, "PHP Code Audit Primer Tutorial" finally online, http://edu.51cto.com/course/course_id-7776.html. This tutorial takes Dvwa as a platform, and analyzes the causes and patching methods of common web vulnerabilities such as SQL injection, XSS, CSRF, command injection, file inclusion from the angle of PHP code. The WAF configuration is not included in the tutorial due to the fact that WAF has a smaller share of the game.
Since the beginning of September, we began to give lectures to the students who participated in the contest and recorded the tutorial synchronously. But because of this semester too many courses, so can only use the weekend time to lecture, coupled with a disease in the middle, until the end of October to finish the course, coupled with the post-editing, until now December this set of tutorials to finish.
The first set of web penetration tutorials has been good since the end of August, so far more than 4,500 people have studied, and there are 29 paid trainees. According to current thinking, preparation of the production of video tutorials and publishing materials as a personal recent major work, so follow-up will be published tutorials, and plans to launch some free tutorials.
This article from "a pot of turbid wine" blog, reproduced please contact the author!
PHP Code Audit Tutorial