Cool interactive site showing your how to perform a Server Side Request Forgery hack, based on a true incident:
The following interactive tutorial is a reconstruction of Capital One’s data breach incident that exposed the records of almost 106 million customers.
Paige Thompson is accused of breaking into a Capital One server and gaining access to 140,000 Social Security numbers, 1 million Canadian Social Insurance numbers and 80,000 bank account numbers.
To all developers: As always, beware when processing user input …
Contra – Interactive Application Security Training →
Via Jesse