ViewTube

ViewTube
Sign inSign up

Info

Channel that discusses security related topics. The majority of videos will cover web security but occasionally we'll talk about content related to certs like the OSCP, OSWE and CRTP.

-ABOUT-
Rana Khalil is an accomplished Application Security Engineer currently steering the digital safety ship in Canada's dynamic public and private sectors. With her cutting-edge expertise, she's not only securing applications, but also shaping the future of cybersecurity across the nation. 

She holds a Bachelor's and Master’s degree in Computer Science and is OSCP certified. She has spoken about her research at various local and international conferences, and received several awards and honorable mentions for her contributions to the cybersecurity community. 

Rana has also founded her own online academy where she teaches web application penetration testing. Her mission? To make cybersecurity education affordable and keep the digital frontier safe, one application at a time.

Links

Tags

security
web security
penetration testing
owasp
open web application security project
hacking
ethical hacking
computer security
network security
infrastructure security
security testing
bug bounty
pentesting
rana khalil
offensive security
oscp
offensive security certified professional
OSWE
offensive security web expert
hack the box
htb
web security academy
burp
burp suite
burp suite pro
portswigger

Stats

Joined January 12, 2021
5,097,775 total views
Canada

Featured video

Introduction to the Web Security Academy Series

78,014 views

5 years ago

Popular videos

SQL Injection | Complete Guide
1:11:53
SQL Injection | Complete Guide

366,000 views

5 years ago

SQL Injection - Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
7:05
SQL Injection - Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

171,000 views

5 years ago

SQL Injection - Lab #2 SQL injection vulnerability allowing login bypass
7:00
SQL Injection - Lab #2 SQL injection vulnerability allowing login bypass

159,000 views

5 years ago

SQL Injection - Lab #11 Blind SQL injection with conditional responses
31:25
SQL Injection - Lab #11 Blind SQL injection with conditional responses

141,000 views

5 years ago

Cross-Site Request Forgery (CSRF) | Complete Guide
48:11
Cross-Site Request Forgery (CSRF) | Complete Guide

136,000 views

5 years ago

SQL Injection - Lab #3 SQLi UNION attack determining the number of columns returned by the query
19:23
SQL Injection - Lab #3 SQLi UNION attack determining the number of columns returned by the query

134,000 views

5 years ago

SQL Injection - Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
29:23
SQL Injection - Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

103,000 views

5 years ago

Cross-Origin Resource Sharing (CORS) | Complete Guide
52:17
Cross-Origin Resource Sharing (CORS) | Complete Guide

100,000 views

4 years ago

Broken Access Control | Complete Guide
39:33
Broken Access Control | Complete Guide

99,000 views

3 years ago

Server-Side Request Forgery (SSRF) | Complete Guide
47:04
Server-Side Request Forgery (SSRF) | Complete Guide

98,000 views

4 years ago

Introduction to the Web Security Academy Series
12:11
Introduction to the Web Security Academy Series

78,000 views

5 years ago

Broken Access Control - Lab #3 User role controlled by request parameter | Short Version
4:13
Broken Access Control - Lab #3 User role controlled by request parameter | Short Version

77,000 views

3 years ago

Udemy Courses

Rana Khalil
Mastering SQL Injection - The Ultimate Hands-On Course on Udemy!
9:08
Mastering SQL Injection - The Ultimate Hands-On Course on Udemy!

17,000 views

3 years ago

Rana Khalil
Mastering Authentication Vulnerabilities - The Ultimate Hands-On Course on Udemy!
9:38
Mastering Authentication Vulnerabilities - The Ultimate Hands-On Course on Udemy!

7,800 views

3 years ago

Rana Khalil
Mastering Directory Traversal Vulnerabilities - The Ultimate Hands-On Course on Udemy!
9:32
Mastering Directory Traversal Vulnerabilities - The Ultimate Hands-On Course on Udemy!

3,200 views

3 years ago

Rana Khalil
Mastering Command Injection Vulnerabilities - The Ultimate Hands-On Course on Udemy!
8:28
Mastering Command Injection Vulnerabilities - The Ultimate Hands-On Course on Udemy!

4,300 views

2 years ago

Rana Khalil
Mastering Server-Side Request Forgery Vulnerabilities - The Ultimate Hands-On Course on Udemy!
9:02
Mastering Server-Side Request Forgery Vulnerabilities - The Ultimate Hands-On Course on Udemy!

4,800 views

2 years ago

Application Security (AppSec)

Rana Khalil
Securing Open Source Dependencies - NahamCon 2023
26:45
Securing Open Source Dependencies - NahamCon 2023

6,500 views

3 years ago

Web Security Academy - Authentication Vulnerabilities (Long Version)

Rana Khalil
Authentication Vulnerabilities | Complete Guide
31:03
Authentication Vulnerabilities | Complete Guide

36,000 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #1 Username enumeration via different responses | Long Version
7:30
Authentication Vulnerabilities - Lab #1 Username enumeration via different responses | Long Version

11,000 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #2 2FA simple bypass | Long Version
13:14
Authentication Vulnerabilities - Lab #2 2FA simple bypass | Long Version

9,900 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #3 Password reset broken logic | Long Version
14:37
Authentication Vulnerabilities - Lab #3 Password reset broken logic | Long Version

6,500 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #4 Username enumeration via different responses | Long Version
10:51
Authentication Vulnerabilities - Lab #4 Username enumeration via different responses | Long Version

6,400 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #5 Username enumeration via response timing | Long Version
15:26
Authentication Vulnerabilities - Lab #5 Username enumeration via response timing | Long Version

6,800 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #6 Broken brute-force protection, IP block | Long Version
15:48
Authentication Vulnerabilities - Lab #6 Broken brute-force protection, IP block | Long Version

6,900 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #7 Username enumeration via account lock | Long Version
11:09
Authentication Vulnerabilities - Lab #7 Username enumeration via account lock | Long Version

5,300 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #8 2FA broken logic | Long Version
11:03
Authentication Vulnerabilities - Lab #8 2FA broken logic | Long Version

5,000 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #9 Brute-forcing a stay-logged-in cookie | Long Version
18:41
Authentication Vulnerabilities - Lab #9 Brute-forcing a stay-logged-in cookie | Long Version

5,900 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #10 Offline password cracking | Long Version
13:27
Authentication Vulnerabilities - Lab #10 Offline password cracking | Long Version

3,500 views

3 years ago

Rana Khalil
Authentication Vulnerabilities - Lab #11 Password reset poisoning via middleware | Long Version
9:55
Authentication Vulnerabilities - Lab #11 Password reset poisoning via middleware | Long Version

4,600 views

2 years ago

Web Security Academy - Directory Traversal (Long Version)

Rana Khalil
Directory Traversal | Complete Guide
22:33
Directory Traversal | Complete Guide

35,000 views

3 years ago

Rana Khalil
Directory Traversal - Lab #1 File path traversal, simple case | Long Version
15:26
Directory Traversal - Lab #1 File path traversal, simple case | Long Version

11,000 views

3 years ago

Rana Khalil
Directory Traversal - Lab #2 File path traversal, traversal sequences blocked | Long Version
12:22
Directory Traversal - Lab #2 File path traversal, traversal sequences blocked | Long Version

5,100 views

3 years ago

Rana Khalil
Directory Traversal - Lab #3 File path traversal, traversal sequences stripped | Long Version
15:53
Directory Traversal - Lab #3 File path traversal, traversal sequences stripped | Long Version

3,500 views

3 years ago

Rana Khalil
Directory Traversal - Lab #4 Path traversal sequences stripped w/ URL-decode | Long Version
13:47
Directory Traversal - Lab #4 Path traversal sequences stripped w/ URL-decode | Long Version

3,500 views

3 years ago

Rana Khalil
Directory Traversal - Lab #5 File path traversal, validation of start of path | Long Version
11:55
Directory Traversal - Lab #5 File path traversal, validation of start of path | Long Version

2,900 views

3 years ago

Rana Khalil
Directory Traversal - Lab #6 Validation of file extension with null byte bypass | Long Version
11:22
Directory Traversal - Lab #6 Validation of file extension with null byte bypass | Long Version

2,800 views

3 years ago

Web Security Academy - Broken Access Control (Long Version)

Rana Khalil
Broken Access Control | Complete Guide
39:33
Broken Access Control | Complete Guide

99,000 views

3 years ago

Rana Khalil
Broken Access Control - Lab #1 Unprotected admin functionality | Long Version
16:33
Broken Access Control - Lab #1 Unprotected admin functionality | Long Version

26,000 views

3 years ago

Rana Khalil
Broken Access Control - Lab #2 Unprotected admin functionality with unpredictable URL | Long Version
24:23
Broken Access Control - Lab #2 Unprotected admin functionality with unpredictable URL | Long Version

13,000 views

3 years ago

Rana Khalil
Broken Access Control - Lab #4 User role can be modified in user profile | Long Version
23:06
Broken Access Control - Lab #4 User role can be modified in user profile | Long Version

9,600 views

3 years ago

Rana Khalil
Broken Access Control - Lab #3 User role controlled by request parameter | Long Version
25:06
Broken Access Control - Lab #3 User role controlled by request parameter | Long Version

8,600 views

3 years ago

Rana Khalil
Broken Access Control - Lab #5 URL-based access control can be circumvented | Long Version
16:50
Broken Access Control - Lab #5 URL-based access control can be circumvented | Long Version

7,000 views

3 years ago

Rana Khalil
Broken Access Control - Lab #6 Method-based access control can be circumvented | Long Version
18:50
Broken Access Control - Lab #6 Method-based access control can be circumvented | Long Version

5,700 views

3 years ago

Rana Khalil
Broken Access Control - Lab #7 User ID controlled by request parameter | Long Version
22:51
Broken Access Control - Lab #7 User ID controlled by request parameter | Long Version

4,100 views

3 years ago

Rana Khalil
Broken Access Control - Lab #8 UID controlled by parameter, with unpredictable UIDs | Long Version
30:44
Broken Access Control - Lab #8 UID controlled by parameter, with unpredictable UIDs | Long Version

3,700 views

3 years ago

Rana Khalil
Broken Access Control - Lab #9 UID controlled by param with data leakage in redirect | Long Version
23:02
Broken Access Control - Lab #9 UID controlled by param with data leakage in redirect | Long Version

3,200 views

3 years ago

Rana Khalil
Broken Access Control - Lab #10 User ID controlled by param with password disclosure | Long Version
28:41
Broken Access Control - Lab #10 User ID controlled by param with password disclosure | Long Version

3,100 views

3 years ago

Rana Khalil
Broken Access Control - Lab #11 Insecure direct object references | Long Version
24:11
Broken Access Control - Lab #11 Insecure direct object references | Long Version

3,600 views

3 years ago

Web Security Academy - Command Injection (Long Version)

Rana Khalil
Command Injection | Complete Guide
32:07
Command Injection | Complete Guide

55,000 views

4 years ago

Rana Khalil
Command Injection - Lab #1 OS command injection, simple case | Long Version
20:12
Command Injection - Lab #1 OS command injection, simple case | Long Version

18,000 views

4 years ago

Rana Khalil
Command Injection - Lab #2 Blind OS command injection with time delays | Long Version
21:44
Command Injection - Lab #2 Blind OS command injection with time delays | Long Version

8,700 views

4 years ago

Rana Khalil
Command Injection - Lab #3 Blind OS command injection with output redirection | Long Version
28:01
Command Injection - Lab #3 Blind OS command injection with output redirection | Long Version

6,600 views

4 years ago

Rana Khalil
Command Injection - Lab #4 Blind OS command injection with out-of-band interaction | Long Version
8:47
Command Injection - Lab #4 Blind OS command injection with out-of-band interaction | Long Version

5,600 views

4 years ago

Rana Khalil
Command Injection - Lab #5 Command injection with out-of-band data exfiltration | Long Version
9:45
Command Injection - Lab #5 Command injection with out-of-band data exfiltration | Long Version

5,200 views

4 years ago

Web Security Academy - CORS (Long Version)

Rana Khalil
Cross-Origin Resource Sharing (CORS) | Complete Guide
52:17
Cross-Origin Resource Sharing (CORS) | Complete Guide

100,000 views

4 years ago

Rana Khalil
CORS - Lab #1 CORS vulnerability with basic origin reflection | Long Video
16:41
CORS - Lab #1 CORS vulnerability with basic origin reflection | Long Video

25,000 views

4 years ago

Rana Khalil
CORS - Lab #2 CORS vulnerability with trusted null origin | Long Video
20:35
CORS - Lab #2 CORS vulnerability with trusted null origin | Long Video

9,600 views

4 years ago

Rana Khalil
CORS - Lab #3 CORS vulnerability with trusted insecure protocols | Long Video
25:00
CORS - Lab #3 CORS vulnerability with trusted insecure protocols | Long Video

7,300 views

4 years ago

Rana Khalil
CORS - Lab #4 CORS vulnerability with internal network pivot attack | Long Video
36:48
CORS - Lab #4 CORS vulnerability with internal network pivot attack | Long Video

4,900 views

4 years ago

Web Security Academy - SSRF (Long Version)

Rana Khalil
Server-Side Request Forgery (SSRF) | Complete Guide
47:04
Server-Side Request Forgery (SSRF) | Complete Guide

98,000 views

4 years ago

Rana Khalil
SSRF - Lab #1 Basic SSRF against the local server | Long Version
23:04
SSRF - Lab #1 Basic SSRF against the local server | Long Version

17,000 views

4 years ago

Rana Khalil
SSRF - Lab #2 Basic SSRF against another back-end system | Long Version
28:25
SSRF - Lab #2 Basic SSRF against another back-end system | Long Version

9,000 views

4 years ago

Rana Khalil
SSRF - Lab #3 SSRF with blacklist-based input filter | Long Version
21:41
SSRF - Lab #3 SSRF with blacklist-based input filter | Long Version

6,400 views

4 years ago

Rana Khalil
SSRF - Lab #4 SSRF with whitelist-based input filter | Long Version
22:36
SSRF - Lab #4 SSRF with whitelist-based input filter | Long Version

6,700 views

4 years ago

Rana Khalil
SSRF - Lab #5 SSRF with filter bypass via open redirection vulnerability | Long Version
20:08
SSRF - Lab #5 SSRF with filter bypass via open redirection vulnerability | Long Version

5,900 views

4 years ago

Rana Khalil
SSRF - Lab #6 Blind SSRF with out-of-band detection | Long Version
7:33
SSRF - Lab #6 Blind SSRF with out-of-band detection | Long Version

6,800 views

4 years ago

Rana Khalil
SSRF - Lab #7 Blind SSRF with Shellshock exploitation | Long Version
14:13
SSRF - Lab #7 Blind SSRF with Shellshock exploitation | Long Version

7,300 views

4 years ago

Web Security Academy - CSRF (Long Version)

Rana Khalil
Cross-Site Request Forgery (CSRF) | Complete Guide
48:11
Cross-Site Request Forgery (CSRF) | Complete Guide

136,000 views

5 years ago

Rana Khalil
CSRF - Lab #1 CSRF vulnerability with no defenses | Long Version
23:31
CSRF - Lab #1 CSRF vulnerability with no defenses | Long Version

35,000 views

5 years ago

Rana Khalil
CSRF - Lab #2 CSRF where token validation depends on request method | Long Version
21:42
CSRF - Lab #2 CSRF where token validation depends on request method | Long Version

16,000 views

5 years ago

Rana Khalil
CSRF - Lab #3 CSRF where token validation depends on token being present | Long Version
15:36
CSRF - Lab #3 CSRF where token validation depends on token being present | Long Version

9,800 views

5 years ago

Rana Khalil
CSRF - Lab #4 CSRF where token is not tied to user session | Long Version
19:09
CSRF - Lab #4 CSRF where token is not tied to user session | Long Version

11,000 views

4 years ago

Rana Khalil
CSRF - Lab #5 CSRF where token is tied to non-session cookie | Long Version
28:15
CSRF - Lab #5 CSRF where token is tied to non-session cookie | Long Version

15,000 views

4 years ago

Rana Khalil
CSRF - Lab #6 CSRF where token is duplicated in cookie | Long Version
21:45
CSRF - Lab #6 CSRF where token is duplicated in cookie | Long Version

8,000 views

4 years ago

Rana Khalil
CSRF - Lab #7 CSRF where Referer validation depends on header being present | Long Version
20:40
CSRF - Lab #7 CSRF where Referer validation depends on header being present | Long Version

5,900 views

4 years ago

Rana Khalil
CSRF - Lab #8 CSRF with broken Referer validation | Long Version
19:07
CSRF - Lab #8 CSRF with broken Referer validation | Long Version

6,600 views

4 years ago

Web Security Academy - SQL Injection (Long Version)

Rana Khalil
SQL Injection | Complete Guide
1:11:53
SQL Injection | Complete Guide

366,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
29:23
SQL Injection - Lab #1 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

103,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #2 SQL injection vulnerability allowing login bypass
33:39
SQL Injection - Lab #2 SQL injection vulnerability allowing login bypass

44,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #3 SQLi UNION attack determining the number of columns returned by the query
34:16
SQL Injection - Lab #3 SQLi UNION attack determining the number of columns returned by the query

36,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #4 SQL injection UNION attack, finding a column containing text
29:22
SQL Injection - Lab #4 SQL injection UNION attack, finding a column containing text

20,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #5 SQL injection UNION attack, retrieving data from other tables
25:00
SQL Injection - Lab #5 SQL injection UNION attack, retrieving data from other tables

15,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #6 SQL injection UNION attack, retrieving multiple values in a single column
29:27
SQL Injection - Lab #6 SQL injection UNION attack, retrieving multiple values in a single column

12,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #7 SQL injection attack, querying the database type and version on Oracle
27:04
SQL Injection - Lab #7 SQL injection attack, querying the database type and version on Oracle

14,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #8 SQLi attack, querying the database type and version on MySQL & Microsoft
22:36
SQL Injection - Lab #8 SQLi attack, querying the database type and version on MySQL & Microsoft

11,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #9 SQL injection attack, listing the database contents on non Oracle databases
45:36
SQL Injection - Lab #9 SQL injection attack, listing the database contents on non Oracle databases

14,000 views

5 years ago

Rana Khalil
SQL Injection - Lab #10 SQL injection attack, listing the database contents on Oracle
40:42
SQL Injection - Lab #10 SQL injection attack, listing the database contents on Oracle

9,600 views

5 years ago

Rana Khalil
SQL Injection - Lab #11 Blind SQL injection with conditional responses
48:56
SQL Injection - Lab #11 Blind SQL injection with conditional responses

35,000 views

5 years ago