Interested in supporting me and gaining early access to the Web Security Academy videos when they're recorded? Consider buying my course: academy.ranakhalil.com/p/web-security-academy-video-series! ✨ ✨
@MP-eq8fx3 жыл бұрын
Cant praise enough. May be its my shortcoming, but many paid courses couldnt explain me concepts which your videos did in a very simple way. I am learning now, and if I ever get a bounty, first thing will be to support you.
@RanaKhalil1013 жыл бұрын
@@MP-eq8fx No need to purchase my course. Glad you're liking the series!
@MP-eq8fx3 жыл бұрын
@@RanaKhalil101 request you to do one video on how to use Burp Suite.
@macbook65073 жыл бұрын
Thanks for the lecture, teach us about CSS full course
@saneyalam74342 жыл бұрын
Bought the course to support you. Hoping for more content soon
@robot677993 жыл бұрын
Your teaching style is the best. Really difficult to find teachers like you 😭. I'm having difficulties in XSS. Hope you will make videos on that too ❤️❤️
@govind227033 жыл бұрын
For some reason, I really like listening u explain stuff. This reminds me of the science tv shows I used to watched as a kid :)
@salimzavedkarim2302 жыл бұрын
This is gotta be the best video on the Internet. I'm a fan now.
@devinosborne3396 Жыл бұрын
7:55 and this is the best explanation i've heard yet. Well done. Very clear
@thesecuritypoint3 жыл бұрын
Ohh mam, after so long time. Waiting the new topic after being master in sql😁
@deepcoolclear9 күн бұрын
You explain everything clearly and concisely without over complicating the topic. Please make some Udemy courses! Thank you from Canada 🇨🇦
@xa3da42 жыл бұрын
Awesome Explanation 🙌💥✌✌Thanks ma'am ! (Finally Landed on the BEST CSRF EXPLANATION TUTORIAL on KZbin) This channel Deserves Millions of Subscribers ...after somedays this playlists will also hit millions.🔥
@rajanrawal63962 жыл бұрын
i don't even know how to put things into words the way how you explain, it's an amazing mam..we need such playlist more in the future..
@saneyalam74342 жыл бұрын
Great explanation. All my confusion related to CSRF are gone now... Thank you so much for creating such content.
@jub0bs3 жыл бұрын
44:45 "Of course, you need to use [SameSite] in addition to CSRF tokens and not as a defence on its own." This cannot be repeated enough 👏👏👏
@abidkhan99343 жыл бұрын
Hey rana Khalil good to see u.. please do other topics as soon as possible.. because u have an outstanding ability to train.
@t41h453 жыл бұрын
Awesome tutorial ever. First complete SQLi and now CSRF 👍😎
@swamimzaman70582 жыл бұрын
I like the way you explain the topics very minutely you explain it’s very easy to understand .Hoping you to upload all the labs of portswigger soon.
@DaggerSecurity2 жыл бұрын
السلام عليكم ما شاء الله هذا أحسن شرح في الموضوع جزاك الله خيرا
@Mohd-0_0-Taiyyab2 жыл бұрын
This video needs 100 million views
@amaama4140Ай бұрын
Wow, this was AWESOME. Many thanks for this great learning material.
@zubairsafiii3 жыл бұрын
love from pakistan Thanks for doing such amazing job. people get's to learn alot.
@rmzhmd1057 Жыл бұрын
Oh, my God, how well you explain this
@alimahmouditavana37193 жыл бұрын
i'm so excited,please upload this video
@yevhendidenko3833 Жыл бұрын
God, how wanderful and detailed you can explain! Thaaaanks!!
@rishabhsahni43123 жыл бұрын
Very well explained , covering each aspect in detail . Highly Appreciated!! Rana 👍
@bird2718283 ай бұрын
Rana, I love your videos and your explanations. They are very informative. Thank you.
@gangsternerd8419 Жыл бұрын
Thanks for everything you do and you are highly appreciated, we could appreciate an updated version of this video or maybe just a part that include exploring json request type csrf tricks and tips, including some guideline that could help beginners, I could appreciate especially covering using flash to exploit csrf ❤
@bertrandfossung12163 жыл бұрын
Rana thank you very much. CSRF is my best bug class..
@javhaasuhochir81262 жыл бұрын
incredibly clear and easy to understand, thank you
@Hefnawiat2 жыл бұрын
Excellent quality, amazing content, and very clear way in illustration, I am amazed, greetings from Egypt
@JacobSean-iy3tl4 ай бұрын
you have such a calming voice
@abdelghafarmuhamed101310 күн бұрын
Thank u ur detailed Explaining is unique and awesome
@gameforme60072 жыл бұрын
just finished watching the full video .. really awesome content.. Thanks for that.
@plum3-q5k6 ай бұрын
this video helped me as helll I got all my doubts clear TNX
@amolgangurde27903 жыл бұрын
Awesome video and detail explanation. Thank you 👍
@w3w3w33 жыл бұрын
best video ever on the subject! you have a great way at explaining things lol. thanks
@electrowizard26582 жыл бұрын
im from india mam u are a very good teacher i wish i could have u as my cybersecurity mentor
@sawtintkyaw8873 жыл бұрын
Hello Rana Khalil I check your channel every week for new learning video. Thank you again.
@fishslider Жыл бұрын
Best in depth video I found
@paulojr1384 Жыл бұрын
Im in XSS by The PortSwigger learning Path. Ansious to cath The next chapter CSRF to whatch The Best Teacher. Tnx👍
@abdallahezat8604 Жыл бұрын
That is really awesome session,Thanks alot Rana and great effort.
@saherzayed2605Ай бұрын
Thanks for the amazing explanation...
@petergentile89743 жыл бұрын
these series are amazing!, thank you.
@canklc5772Ай бұрын
Crystal clear. Thanks
@phinehasantwi96153 жыл бұрын
Thanks so much for given us the lessons of CSRF
@sto2779 Жыл бұрын
Excellent explanation on the topic. Thanks.
@mohamed__sharif2 ай бұрын
This is a great video. Thank you.
@acronproject Жыл бұрын
Thank you Ms.Khalil is very useful for me.
@masicre95742 жыл бұрын
Thank you soo much for this video...I am a fresher to this field...This class was awesome...please upload more videos and labs on attacks...
@gameforme60072 жыл бұрын
just complete watching the full video . Really awesome content. Thanks for the content apu(sister)
@HakanGalip10 ай бұрын
Thanks a lot clear to understand
@M0X01013 жыл бұрын
waiting from Egypt
@baybars43923 жыл бұрын
Hi Rana Khalil, my English knowledge is not very good, but if I ask that your videos are very instructive, can you add Turkish and English subtitle options to your video?
@baybars43923 жыл бұрын
???
@durzodhon3 жыл бұрын
Great!!
@Mersal-tq9lm3 жыл бұрын
Really it was great 👍
@محمدرضاجعفری-غ2ث3 жыл бұрын
Thanks
@akahumpty3 жыл бұрын
Great video!
@milestips Жыл бұрын
Thanks Maam 🧑🏻💻😃
@gnomoleproso47 Жыл бұрын
best video ever
@fabiosalvi9035 Жыл бұрын
Thank you. Your video is really well done :-)
@saikiran-ez6ud3 жыл бұрын
I great one I ever thanks 🥂
@omarkhalid29663 жыл бұрын
Waiting . . .
@allmusic12813 жыл бұрын
rana I love your videos and the way you explain everything, is it possible that you can activate the subtitles in this video? my English is not very good, but with the subtitles I can understand your video perfectly, I hope it is possible and thank you very much for sharing your knowledge, it is of great value.
@saminbinhumayun85811 ай бұрын
Please make videos on xss thank you❤
@psychology22512 жыл бұрын
keeeeeeeep going want wait to finishing all labs with you ^_^
@ex0day5 ай бұрын
Your material is outstanding thanks a lot
@Phuongang-ti6ch6 ай бұрын
Hello, I have a question What's the difference between buying a course and not buying it?
@rahmanasadur8167 Жыл бұрын
Excellent
@nimamehdipor9109 Жыл бұрын
Hi, tanks for awsome video , Can you activate the subtitles of your video, it will really help a lot, thank you
@rohitbhanot7809Ай бұрын
Just wondering why we need an and form to trigger the attack. Why cant just make the xhr request directly within the script tag ? It will give the same effect where when victim is tricked to load the page, the POST is automatically fired on load.
@abdelghafarmuhamed101310 күн бұрын
شكرا ليكي كتير
@mdparvejhasan70402 жыл бұрын
awesome work 👍😀
@ghassenbarkache1676 Жыл бұрын
I’ve been following you for a while thank you for what you are doing; I watched laltely your interview with David Bombal on his youtube channel; I’m really impressed and I would like to thank you for your advices. I have some questions regarding intigriti if you can reply to them I would be grateful
@sureshiva4605 Жыл бұрын
Hey Nicely done
@SecurityTalent3 жыл бұрын
Thank you, sister......
@kiiwwwiiii3 ай бұрын
Hi @RanaKhalil101, Your videos and explanation are really good. It made me understand the basics so much thanks a lot for this!! Reallly i mean it.
@salahalgarhy33347 ай бұрын
Why is the subtitles closed on the video? Please look into this matter
@سامرسعيد-ي1بАй бұрын
Thanks from iraq❤
@mohmedahmed65152 жыл бұрын
thank you rana
@gfernandez29703 жыл бұрын
I was wondering if it'd possible to add English subtitles, my sister is deaf, and I'm not pretty good at understanding English (we're from Spain), but both of us can read it. We're aware how good your material is, and it'd me amazing for us if that'd be possible. Thanks a lot in advance!
@RanaKhalil1013 жыл бұрын
I wish it was under my control! KZbin automatically generates captions for my videos when I upload them. Unfortunately, for some reason, it didn't upload subtitles for this video :(
@aqibmunshi618411 ай бұрын
Great video Rana. A quick question..why doesnt the browser attach the csrf token just as it attaches the cookie when the attacker sends a url of the site with email change parameter?. I mean how does the browser decide when to attach the csrf token and when not? I mean if an attacker sends me a link for email change and I have a cookie and token in the browser, why wont the browser not attach the csrf token at that point in time?
@karanjoshi74383 жыл бұрын
please make videos on OAuth 2
@forceboxed Жыл бұрын
For stateless applications, shouldn't a single CSRF token (passed as hidden input field) be enough? Why do we need double submit defence?
@m0niruzzaman3 жыл бұрын
Excellent explain ♥️ Thank you!
@motivationvideo60173 жыл бұрын
great thanks very much
@落珰 Жыл бұрын
It seems that there are no subtitles and cannot be translated, which is a bit troublesome
@nikhilbk34092 жыл бұрын
Second question is Under Inadequate defense, instead of using the referrer header, if Origin header is used against Whitelist allowed origin, will it become another layer of security for CSRF attack OR is Origin header also can be spoofed?
@techtutorials70263 жыл бұрын
Nice job
@yazeedsalahat9227 Жыл бұрын
hi rana could you please enable translation Thanks
@readypubggo5650 Жыл бұрын
Awesome,,,,, ....
@laxmantamong2364 Жыл бұрын
but how does the attacker know that the link has been clicked and email got changed?
@إبنخوارزصلاحالدين3 жыл бұрын
salam alaykom ..thanks a lot of Sister
@MehediHasan-pv4em3 жыл бұрын
Please make more videos for us
@إبنخوارزصلاحالدين3 жыл бұрын
i have a question Sister ....i master php and i can also do scripts in python...but as i see in youtube..most youtubers dont encourage php languages!!! i am confused really if i continue in php or i leave it and try to master python..what is your advice Sister and thanks a lot of
@Hussain-we6tk Жыл бұрын
Hi, I have a doubt as why Post Method will not include cookies?
@nobackupkiwi3 жыл бұрын
I dont get how sql injections and csrf are related?
@RanaKhalil1013 жыл бұрын
They're not.
@nobackupkiwi3 жыл бұрын
@@RanaKhalil101 At min 16:50 you said to chain this two methods... I don't understand what you mean by that, could you please elaborate?
@RanaKhalil1013 жыл бұрын
@@nobackupkiwi I was referring to chaining two vulnerabilities together assuming that the application is vulnerable to both. If an authenticated page is vulnerable to SQLi and the application does not use a csrf defense, then you can perform an SQLi attack within your CSRF attack in order to possibly gain code execution on the server. A more common example would be chaining a csrf attack with a command injection
@nobackupkiwi3 жыл бұрын
@@RanaKhalil101 Clear as water. Thanks for the explanation. I hope there will be csrf+sqli cases in future labs.
@kalidsherefuddin Жыл бұрын
The greatest
@gurvirsingh41903 жыл бұрын
Great ❤️❤️
@uionei90832 жыл бұрын
please turn on subtitles,
@the_shafei Жыл бұрын
are there ones for XSS please ?
@nikhilbk34092 жыл бұрын
hello ma'am, I have doubt when the attacker send the email to victim with malicious link to click. In this case as you told in the Additional defense concept regarding SameSite attribute, since the victim clicked the link in the gmail, so if the SameSite=Strict then should CSRF attack will fail? because the request is initiated from the third part gmail. Is my undestanding is wrong?