Course overview & threat model
This module covers three high-impact attack classes: unsafe deserialization (binary/object formats that execute code), server-side template injection (SSTI) that can evaluate expressions or code in templating engines, and insecure file uploads that allow web-accessible malware, web shells, or unexpected file handling. Focus on prevention, detection, safe patterns, and incident response. Always test in lab environments.
Why these three vectors matter (RCE, data leakage, privilege escalation).