
Explore testing a get sql injection flaw by identifying vulnerable links, validating vulnerability with a quote, enumerating columns via order by, and dumping usernames and passwords from the database.
Demonstrates how to test a post sql injection flaw by configuring a proxy, intercepting requests, and using a repeater to inject payloads and enumerate columns until gaining admin access.
Discover how automated sql injection testing reveals vulnerable databases, enumerates columns, and dumps sensitive tables, including user names and contact data, on a target website.
Explore how web application firewalls defend against SQL injection and other vulnerabilities, while examining bypass attempts and vulnerability discovery techniques in a controlled testing scenario.
Explore authentication bug testing by bypassing login, accessing a dashboard, and examining exposed user data and admin capabilities on an online training platform.
This lecture demonstrates bypassing OTP authentication by intercepting and altering OTP responses with Burp Suite on a target site, enabling account creation.
Explore local file inclusion vulnerability, showing how a misused file path can disclose passwords and user data, potentially enabling remote code execution or cross-site scripting in web applications.
Learn how insecure direct object references (IDOR) allow bypassing authorization by altering input parameters to access other users’ data, including profiles and emails, via a live demo.
Explore the shellshock bash bug, its exploitation via environment variables and command injection, its impact on web servers and devices, and the patch fixes.
Explain password reset poisoning where attackers manipulate reset requests to steal the secret tokens required to reset passwords and compromise accounts by redirecting them to a domain under their control.
In this course, I will practically demonstrate that how you can identify and test the security bugs of a website using real world pentesting methodologies. Typically, ethical hacking is taught by installing virtual machines on your PC and focused on more theory. This style of learning stops your exploration as there are no challenges. So what's next ? I have designed this course in a very easy way that anyone can start learning at their own pace and ease.
This course is Mainly focused on many well known top vulnerabilities of a website including ;
Injection Flaw : We will discuss Sql Injection in detail which is a very common website flaw both manually or using automated tools
Authntication Flaw: We will look at Authentication Bypassing flaw using Magic Strings method
File Inclusion Flaw: We will test LFI bug and try to understand its logics in detail
Business Logic Bugs: We will cover an IDOR Vulnerability which effects on website users and their information
Bash Vulnerability: We will see a very famous Bug of a Linux bash shell "Shellshock" and see its impact on a website
Taking this course is much more fun & exciting than learning all of these in a traditional boring way - like through formal IT courses and books. So if you have a serious level of spark in learning the real knowledge then you are landed on a right course...
Happy Learning!!!