Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Web 3.0 DApps & Smart Contract for Pentest & Bug Bounty 2025
Rating: 3.7 out of 5(79 ratings)
921 students

Web 3.0 DApps & Smart Contract for Pentest & Bug Bounty 2025

Practical course to Web 3 Pentesting & Bug bounties 2025
Last updated 3/2025
English
English

What you'll learn

  • DeFi Security
  • Smart Contract
  • Blockchain
  • Cyber Security
  • Blockchain Security
  • Ethereum
  • Remix IDE

Course content

5 sections52 lectures4h 41m total length
  • What is a Blockchain2:56

    Understand blockchain as a distributed, immutable ledger governed by a decentralized network of nodes, enabling cryptocurrencies and smart contracts on web3 platforms.

  • Core Components of a Blockchain3:30

    Explore the core components of a blockchain—decentralized networks (permissioned and permissionless), cryptography, immutable ledgers, consensus, and smart contracts that read and write data across client, backend, and blockchain interface.

  • Practical Example of how Blockchain Works10:16

    Explore how blockchain preserves data integrity through hashing, nonce-based proof of work, and chain linking, including tamper resistance and 51% attack protection.

  • What is Ethereum3:20

    Explore how Ethereum's blockchain, nodes, miners, gas, and immutable smart contracts enable decentralized applications by running a virtual machine that executes code and stores results on the blockchain.

  • Q/A Group0:06
  • What are Smart Contracts4:36

    Learn how smart contracts run on the blockchain, written in solidity, rust, go, or python, and executed by the EVM on Ethereum, with addresses, gas fees, and wallets like Metamask.

  • Metamask and its usage4:22

    Explore metamask as a web3 wallet for connecting apps and storing ether, tokens, and NFTs. Install the Firefox extension, create a wallet, and safeguard the 12-word recovery phrase.

  • Decentralized Applications (dApps)5:03

    Explore how decentralized applications use smart contracts on decentralized networks, learn about dApps and DAOs, and examine AMMs and exchanges like Uniswap and Sushiswap.

  • What a dApp looks like10:27

    Learn how a dApp uses a wallet like MetaMask to send ether to an externally owned address, connect accounts, switch to a test network, and sign transactions.

  • Etherscan.io1:13
  • Remix Introduction8:41

    Explore Remix IDE in the browser, compile and deploy Solidity contracts like Storage.sol using the Solidity compiler, and test interactions in the JavaScript VM with store and retrieve functions.

  • Solidity Rundown2:43

    Explore solidity fundamentals, including contract syntax and data types, to detect vulnerabilities in smart contracts. Practice with Remix IDE to understand the address datatype and declarations like int, uint, bool.

  • Practical on Data Types in Remix5:10

    Explore Solidity data types in Remix IDE, including uint, int, bool, and address, with size variations and visibility modifiers (public, private, internal, external) using a 0.6.0 compiler.

  • Variables in Solidity3:38

    Explore the three types of Solidity variables—local, state, and global—and learn which are stored on the blockchain, plus global vars like msg.sender, msg.value, msg.data, and block.timestamp.

  • Practical on Variables in Remix5:53

    Distinguish state and local variables, apply visibility modifiers, and use global vars like msg.sender to return the caller's address in a deployed Solidity contract.

  • Read And Write Operations2:49

    Learn how to read and write to a blockchain using smart contract functions. Reading is free via view functions, while writing costs gas and transactions to update state.

  • Functions in Solidity3:04

    Solidity functions provide reusable code you can call anywhere, avoiding repetition. Define a function with name, arguments, scope, and a return value, illustrated by add numbers example in Remix IDE.

  • Practical on Functions in Remix2:28

    Deploy a simple addNumbers function in Remix, taking two uints A and B and returning A+B as C; no output without view or pure, so learn about these keywords.

  • Types of functions in Solidity7:56

    Explore Solidity variable types, including state, local, and global variables, and learn how a public function returns multiple values, updates a state variable, and uses msg.sender for global context.

  • Practical on View and Pure Functions in Solidity3:27

    Explore Solidity view and pure functions: return public uint state variable num via a view function, and convert to pure when not reading or changing state; note the auto getter.

  • Constructors in Solidity2:01

    Constructors in Solidity run only once during contract creation to initialize the contract, such as setting an owner or initial state via arguments like _num.

  • Practical on Constructors in Remix5:13

    Learn how to use constructors in Remix to initialize contract state by setting num1 to six and owner to the deployer (msg.sender) during deployment.

  • Modifiers in Solidity1:46

    Explore solidity function modifiers, including an only owner access control modifier and re-entrancy guard; see how the underscore replaces function code and how required enforces and reverts.

  • Practical on Modifiers in Remix8:39

    Learn how to implement solidity modifiers to enforce access control with only owner, using require and msg.sender to guard functions like changeNumber in a MyContract.

  • Mappings in solidity1:41

    Explore Solidity mappings as key-value data structures, retrieve values by address keys, and understand nested mappings with public visibility and practical examples.

  • Practical on How to interact with a smart contract in Remix7:53

    Learn to interact with one smart contract from another using Remix by deploying contracts, creating contract instances, and invoking functions such as changeNum to update public state.

Requirements

  • No Programming Experience Required
  • Basics foundations of usage of computer systems

Description

Learn about Web 3 Security and How to identify vulnerabilities in Smart Contracts for Pentesting & Bug Bounties.

Here's a more detailed breakdown of the course content:

In all the sections we will start the fundamental principle of How the attack works, Exploitation and How to defend from those attacks.


In this course you will learn about :

  • What is Blockchain

  • What are DApps

  • What is a smart contract

  • LAB setup to pentest smart contracts

  • Metamask and its usage

  • Installation of Hardhat

  • Setup Remix IDE

  • Practical on Functions in Remix

  • Practical on View and Pure Functions in Solidity

  • Mappings in solidity

  • Deploying a smart contract

  • Security Vulnerabilities in solidity

  • Practical Example of Integer Overflow and Underflow

  • How to find issues using Ethernaut Playground

  • Selfdestruct in Solidity

  • Fallback Functions

  • Force Challenge

  • Reentrancy Issues

  • Private Variables in Solidity

  • Using Hardhat for testing smart contracts

  • An example PoC on the Parity Wallet Hack

  • How to hunt on Web 3 bug bounty platforms like Immunefi & Hackenproof

  • How to write a professional report

With this course, you get 24/7 support, so if you have any questions you can post them in the Q&A section and we'll respond to you as soon as possible.

Notes:

  • This course is created for educational purposes only and all the websites I have performed attacks are ethically reported and fixed.

  • Testing any website which doesn’t have a Responsible Disclosure Policy is unethical and against the law, the author doesn’t hold any responsibility.

Who this course is for:

  • Beginners who wants to learn DApps Security
  • Beginners who wants to learn about Smart Contract Audits
  • Beginners who wants to learn about Web 3.0 Basics
  • Beginners who wants to learn about identifying security vulnerabilities in DeFI