
Develop foundational ethical hacking skills by solving basic missions that teach how to inspect page source, reveal hidden passwords via comments, and prepare for upcoming realistic hacking challenges.
Learn how a hidden input type vulnerability reveals a password stored in a password.psp file by viewing the page source and submitting input that matches the file, exposing insecure code.
Learn how cryptography protects messages by converting plaintext into ciphertext with encryption algorithms, enabling secure decryption for the intended receiver while thwarting eavesdroppers.
Learn to exploit remote server side include injection by sending exec commands that run on the server to reveal password files in PSP directories.
Explore cookie tampering techniques by manipulating document.cookie in the browser console to change authorization flags and bypass login for a basic level challenge.
Explore realistic hacking challenges that follow basic missions, with 15 tasks, hints, and collaborative problem solving using tools like Google developer tools and injections.
Explore a realistic hacking challenge by manipulating a band rating site to push 'Raging Inferno' to the top via vote values and element inspection, with hints to alter dropdown inputs.
Explore a realistic hacking mission that teaches repairing a hacked poetry site by applying basic HTML and directory traversal techniques, including two-dot traversal, to restore the original index.html.
Explore ethical hacking challenges on a simulated website to identify form vulnerabilities, view source, and use directory traversal to assess server security.
Explore a realistic ethical hacking challenge that covers harvesting email addresses from a mailing list and exploring a website's database, with hints to guide the investigation.
Learn to use the order by command to count columns in a database table, testing one to four columns to reveal the table structure and product data via tampered queries.
Explore how the encryption algorithm converts capital letters to encrypted text using ASCII decimal values, sums with a password, and patterns to enable decryption.
Do you want to learn how to hack websites and web application in the most fun way?
If yes, then this course is for you.
In this course, you will start as a beginner with no previous experience and knowledge about website or web app hacking. You will learn different hacking methodologies, tools and techniques. This course gives you ideas on website hacking through theoretical knowledge and practical implementation. This course is focused on the practical side of penetration testing without neglecting the theory behind each attack. Rather than using virtual machines and Kali Linux tools, We will be using the "hackthissite" website to hone our website hacking skills.
There are several websites on the internet which allow learners to hack through cool and realistic challenges. These websites are free of cost to use and help us understand how web hacking works at the core level. By completing all these challenges and missions, you will be able to start your career as web pen-tester. You can then use some tools and techniques using Kali Linux to uplift your knowledge. But, if you are a complete beginner then, this course will be perfect to start with.
Most of the courses you will find at Udemy will teach you hacking through installing Linux on your machines using virtual machines. This way of learning web hacking can be troublesome for some of us because our machine may not be high end enough to support these tools smoothly.
In order to make anyone start with ethical hacking and web hacking, I have brought this course to you which can be compatible with any machine (Linux, Windows, MacOS x) because we will be learning to hack through completing missions and challenges given by “hackthissite” website.
In this course, we will cover basic to advanced concepts of web and application hacking in a fun and exciting way which will feel like you are playing some sort of the games where you complete the missions and you get rewarded. The “Hack This Site” website we will be using throughout this course is a popular platform among hackers to learn and play hacking games similar to Capture The Flag (CTF).
You will learn following topics throughout this course:
PHP code vulnerability
HTML code tampering
Encryption and Decryption
Server Side Include commands
Cookies tampering
Directory listing vulnerability
SQL injection attacks
Reverse Engineering
Cryptography
Apache server related vulnerability
Cross site scripting attacks (XSS)
Tampering forms and cookies
Application hacking using x64dbg and tools
Wire-shark
You do not need any virtual machines, Kali Linux or high end machines to learn websites and application hacking in this course. I will be using Windows 10 to complete the missions and learn at the same time. You can use any operating system to learn from this course. I will be using Chrome as a web browser throughout this course.
Lastly, This course does not teach you only these aforementioned attacks/missions, we will be updating new content like Javascript missions, programming missions and other remaining missions. Completing these missions, I am sure you will have enough knowledge to attack any type of website you want. Hope to see you at the class!
Caution: Please take permissions of the owner before defacing any websites.