Course 38 - Web Security Known Web Attacks | Episode 2: RCE Filter Bypassing and JSON Hijacking
Published: July 3, 2026
Duration: 23:37
In this lesson, you’ll learn about: bypassing weak RCE filters and understanding JSON hijacking (legacy browser vulnerability)1. Why RCE Filters Fail🔹 Common mistake:Developers block specific characters (like ;)🔹 Problem:Attack surface is much larger than one delimiter👉 Key Insight
Blacklisting single characters is not real security2. Alternative Command Operators🔹 Even if ; is blocked, others exist:&& → execute if first succeeds|| → execute if first fails| → pipe output& → background execution👉 Key Insight
There are multiple ways to chain commands, not just...
Blacklisting single characters is not real security2. Alternative Command Operators🔹 Even if ; is blocked, others exist:&& → execute if first succeeds|| → execute if first fails| → pipe output& → background execution👉 Key Insight
There are multiple ways to chain commands, not just...