# \[GET\] Web Application Hacking | HQ Leak

**URL:** <https://onehack.st/t/get-web-application-hacking-hq-leak/101127>\
**Category:** Give-Away and Freebies\
**Tags:** programming, hacking, documents\
**Created:** [August 16, 2020, 3:14pm UTC](https://onehack.st/t/get-web-application-hacking-hq-leak/101127 "2020-08-16T15:14:57Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [August 16, 2020, 3:14pm UTC](https://onehack.st/t/get-web-application-hacking-hq-leak/101127/1 "2020-08-16T15:14:57Z")

</div>

![--](https://onehack.st/uploads/default/original/3X/8/e/8e12a65b70c6b8632fcb647724fbb2ab1e8b4752.jpeg)

**Topics**

• Comparing web app sec to host / network security  
• Web Application Security Newsmakers  
• Cross-site-scripting  
• XSS Proxy  
• SQL Injection  
• SQL Injection “spot” techniques  
• Nasty SQL Injections  
• Blind SQL Injection  
• Testing ACLs with param manip  
• Web Telnet: Something fun for WebDav Uploads  
• Bad Extension source disclosures  
• Managing web app sec  
• Contributing factors to the problem  
• Approach to web app sec programs  
• Why the C&A process fails web app sec

**Web Application Development “Truisms”**

• Web applications are software  
• Multi-billion dollar software companies inadvertently create a  
massive number of vulnerabilities in their software  
• Your web developers have a lot less training and resources than  
software companies do.  
• Development standards emphasize functionality, not security  
• C-Levels understand other topics better – IDS / IPS, patches  
• Web App dev not approached as engineering

**[Download](https://mega.nz/file/jGw0yK7S#nb6d6mcT_MtqjFNLYaNK8n6ZxKYoFcsI-bUaAOWFpDU)**

**Enjoy!**