Common Web Vulnerabilities and How to exploit them

Name: Common Web Vulnerabilities and How to exploit them
Rating: 4.7 (18 reviews)

Learn about Web Application Technologies, build your own Hacking Lab and exploit common Web App Vulnerabilities

Created byFahri Korkmaz

Last updated 9/2024

English

What you'll learn

Web Application Security
Penetration Testing
Burp Suite
Ethical Hacking

Course content

5 sections • 18 lectures • 1h 14m total length

Welcome to the course1:57
This is the first video of our "Common Web Vulnerabilities and How to exploit them" course. In this video we will see what you will get out of this course and for whom this course is suitable for.
Web Application Penetration Testing3:55
As this course's main focus is web application penetration testing, we will review what that is.

Lab Architecture2:10
In this lecture, we will explore why building a lab environment is beneficial. Furthermore we will get to know the architecture of our lab environment.
Installing and Configuring Kali Linux5:06
In this lecture, we will download and import Kali Linux into Virtualbox. Furthermore, we will create a NAT Network for our lab environment. Finally, we will configure Kali Linux.
Installing and Configuring OWASP Juice Shop2:32
In this lecture, we will install and configure OWASP Juice Shop with Docker on Kali Linux.
Installing and Configuring DVWA3:05
In this lecture, we will install and configure Damn Vulnerable Web App (DVWA) with Docker on Kali Linux. We will also have a brief look into the application.

Insecure Direct Object Reference (IDOR)7:31
In this lecture, we will learn about Insecure Direct Object References (IDORs), how to find and exploit them, and how to protect against them.
Cross Site Scripting (XSS)7:38
In this lecture, we will learn about Stored, Reflected, and DOM-based XSS, as well as how to prevent it. We will also exploit the vulnerabilities in OWASP Juice Shop and DVWA.
SQL Injection2:41
In this lecture, we will learn about SQL Injection and exploit it in OWASP Juice Shop.
Local File Inclusion1:42
In this lecture, we will learn about local file inclusion vulnerabilities and how to exploit them in DVWA.
Command Injection2:56
In this lecture, we will learn about command injection and how to prevent it. Furthermore, we will exploit a command injection flaw in DVWA.
Open Redirect2:32
In this lecture, we will learn about open redirect vulnerabilities, how to prevent them, and how to exploit them in DVWA.
Cross Site Request Forgery (CSRF)5:34
In this lecture, we will go over a vulnerability called Cross-Site-Request-Forgery. After understanding what a CSRF vulnerability is, we will exploit one in the DVWA. Finally, we will learn how to prevent CSRF vulnerabilities.
Unrestricted File Upload3:38
This lecture will inspect unrestricted file upload vulnerabilities and how they arise. We will also exploit a file upload vulnerability in DVWA and bypass a simple filter. Furthermore, we will learn how to prevent file upload vulnerabilities.

Requirements

Basic Understanding of HTTP/HTTPS
Basic Understanding of Web Applications

Description

Companies are relying on web applications to promote their business and services. These web applications are often very complex and yield a high attack service. Often these web applications are accessible from the internet. Additionally, these web applications are handling sensitive data, which will seriously harm a company's reputation if leaked. Even though given these facts, many web applications are still poorly secured. It was never easier for attackers to hack confidential company data and seriously harm a business.

Therefore there is a high need for cyber security professionals that protect these web applications from malicious attackers. To be proficient in web application security, a student needs to know the fundamentals of the web, before diving into web application vulnerabilities. Also, a student needs to practice their skills in a dedicated lab.

This course goes over common web application vulnerabilities and how to exploit them. In this course you will learn about:

Web Application Penetration Testing
Web Application Technologies
Building a dedicated web application penetration testing lab
Common web vulnerabilities, why they occur, how to exploit them, and how to remediate them
Exploiting vulnerabilities with Kali Linux and Burp Suite
What to learn next

This course is suited for beginners in cyber security who want to make their first learning steps toward web application security.

Who this course is for:

Beginners in Penetration Testing

Common Web Vulnerabilities and How to exploit them

What you'll learn

Explore related topics

Course content

Introduction2 lectures • 6min

Fundamentals3 lectures • 14min

Building a Lab Environment4 lectures • 13min

Exploiting Common Web Application Vulnerabilities8 lectures • 34min

Conclusion1 lecture • 7min

Requirements

Description

Who this course is for: