CVE Series: Django (CVE-2022-34265)

Who should take this course?

This course is for seasoned red teamers, penetration testers, security and vulnerability assessment analysts, and system administrators who want to know how to exploit and protect against the latest vulnerabilities impacting enterprise systems.

What are the prerequisites for this course?

Before taking this course, we recommend that you have basic knowledge of Python as a programming language, as well as functional knowledge of web applications. We also recommend taking our OWASP Top 10 course on Injection: https://www.cybrary.it/course/owasp-a1-injection/

Why take this course?

What makes this vulnerability so dangerous is that an adversary can inject malicious code into an application with minimal effort. It is imperative that defenders act quickly to patch their servers and determine if any malicious actors exploited this vulnerability.

What makes this course different from others?

By the end of this course, you should be able to:

• Define the vulnerability, describe its root cause, and communicate its significance to key organizational stakeholders.
• Exploit this vulnerability using publicly available exploit code.
• Execute various mitigation tactics to reduce risk.

Your instructor, Clint Kehr, is a technical manager for a financial services company’s Responsible Disclosure Team, where he interacts with ethical hackers who find vulnerabilities in the company’s infrastructure. Clint is a former Special Agent with the Department of Justice, where he specialized in internet investigations and conducted numerous cases on cyber threat actors on the surface, deep, and dark web, resulting in Clint earning the Attorney General’s Distinguished Service Award.