In this session, it will be explained the concepts of URL Tampering, SQL injection and Cross-Site Scripting (XSS). It will be shown some attacks and how to protect against them. The session will be a story telling in which the attacker will gain more and more access to an APEX application. The session is divided in: 1) Introduction 2) URL Tampering 3) SQL Injection 4) Cross-site scripting 5) Conclusion