Practical Web Attacks

This document outlines an agenda for a presentation on practical demonstrations of web application attacks. The presentation will cover exploiting unvalidated parameters, bypassing access controls, hijacking sessions, cross-site scripting, injection flaws, improper error handling, AJAX security issues, and tools for testing vulnerabilities like WebGoat and WebScarab. References for further information on new web attacks and PHP/LAMP security hardening are also provided.