Ethical Hacking™: Learn to hack Websites and Applications

Explore HTML comments, which are not displayed in the browser, and learn their syntax to document code. Use comments to hide content temporarily and manage paragraphs within the page.

Develop foundational ethical hacking skills by solving basic missions that teach how to inspect page source, reveal hidden passwords via comments, and prepare for upcoming realistic hacking challenges.

Learn the HTTP get and post methods, the core of client–server communication. Get sends data via URL parameters; post transmits data in the request body for login or registration.

Explore a PHP password protection script and how form submission authenticates against a password file. When the file is empty, an empty password grants access.

Learn how a hidden input type vulnerability reveals a password stored in a password.psp file by viewing the page source and submitting input that matches the file, exposing insecure code.

Exploit HTML code tampering by inspecting the page source, editing a hidden input with Sam's email, and redirecting the password reminder to your own email to retrieve the password.

Explore the basic five challenge, exploiting HTML code to send password reminders to an attacker's email, revealing weaknesses in form security and script behavior.

Learn how cryptography protects messages by converting plaintext into ciphertext with encryption algorithms, enabling secure decryption for the intended receiver while thwarting eavesdroppers.

Learn how the Caesar cipher encodes plaintext by shifting letters three positions to create ciphertext, and how encryption and decryption recover the original message.

Learn how to decrypt a password encrypted with a Caesar cipher by analyzing incremental shifts and reversing the process to recover the plaintext.

Explore the encryption algorithm that keeps the first letter, shifts subsequent letters by increasing units, uses ASCII references, and decrypts by reversing the shifts to recover plaintext.

Solve level six by applying the decryption algorithm, reversing the encryption steps with backward shifts, and using the sift cipher to crack the password and reveal the message.

Learn linux command injection basics by chaining commands in a single line with semicolons, locate files, view the calendar, and extract a password from the current directory.

Learn to exploit remote server side include injection by sending exec commands that run on the server to reveal password files in PSP directories.

Discover how to exploit a remote directory traversal vulnerability by using Unix directory traversal, exec commands to list directories, and locate the hidden password file.

Explore cookie tampering techniques by manipulating document.cookie in the browser console to change authorization flags and bypass login for a basic level challenge.

Explore realistic hacking challenges that follow basic missions, with 15 tasks, hints, and collaborative problem solving using tools like Google developer tools and injections.

Explore a realistic hacking challenge by manipulating a band rating site to push 'Raging Inferno' to the top via vote values and element inspection, with hints to alter dropdown inputs.

Explore client-side tampering by inspecting a web page with developer tools to modify HTML and change a dropdown value from 5 to 900, showing the impact on the submitted rating.

This lecture presents a realistic challenge about accessing a hidden admin page and defacing a racist website, with hints on discovering login forms and basic sql injection concepts.

Explore a simple boolean-based SQL injection technique that bypasses password fields to access a database, illustrating how this vulnerability enables unauthorized data access.

Explore a realistic hacking mission that teaches repairing a hacked poetry site by applying basic HTML and directory traversal techniques, including two-dot traversal, to restore the original index.html.

Explore ethical hacking challenges on a simulated website to identify form vulnerabilities, view source, and use directory traversal to assess server security.

Explore a realistic ethical hacking challenge that covers harvesting email addresses from a mailing list and exploring a website's database, with hints to guide the investigation.

Learn to use the order by command to count columns in a database table, testing one to four columns to reveal the table structure and product data via tampered queries.

Explore sql injection concepts with union command to select all four columns from the email table, alongside using order by to deduce column counts, in ethical hacking practice.

Engage with a realistic hacking mission that analyzes get requests and email data. See SQL injection techniques, including order by and union commands, reveal emails from a targeted column.

Learn a realistic web hacking challenge by using directory traversal to access the admin area, extract a password hash, and identify the decoding method with md5.

Realistic Challenge 5 demonstrates an advanced technique to identify the password encryption algorithm by analyzing robots.txt, hidden directories, and indexing cues on a website.

Solve realistic mission 6 by decrypting a heavily encoded message about toxic industrial chemicals using a specified algorithm, using Python, JavaScript, or Excel to reveal a bribery plot.

Explore how the encryption algorithm converts capital letters to encrypted text using ASCII decimal values, sums with a password, and patterns to enable decryption.