Lesson 10: Web Vulnerability Case Studies

This lesson shows **realistic and legal examples** of web vulnerabilities. All examples are safe for educational purposes only.

Case Study 1: SQL Injection (Safe Lab)

Input field: username
Payload: ' OR '1'='1
Effect: Logs in without a password (lab only)

SQL Injection occurs when user input is not properly sanitized. Ethical hackers learn to detect and patch this issue.

Case Study 2: Cross-Site Scripting (XSS)

Input field: comment
Payload: <script>alert('XSS')</script>
Effect: Script runs in browser (lab only)

XSS happens when inputs are rendered without escaping HTML. Ethical hackers report this to secure web applications.

Case Study 3: Broken Authentication

Weak passwords
No multi-factor authentication
Session ID reuse

Users’ accounts can be accessed without proper security. Labs help you learn mitigation strategies safely.