Web App Penetration Testing & Bug Bounty Hunting
What you'll learn
- How to setup Web App Penetration Testing - Home LAB
- Burp Suite
- Assessing Authentication Schemes
- Assessing Authorization Checks
- Assessing Session Management Mechanisms
- Assessing Business Logic
- Testing for browser cache weaknesses
- Testing for account enumeration and guessable accounts
- Testing for weak lock-out mechanisms
- Account provisioning process via REST API
- Testing for directory traversal - Directory traversal
- Assessing Authorization Checks - Local File Include
- Assessing Authorization Checks - Remote File Inclusion
- Assessing Authorization Checks - Privilege escalation
- Assessing Authorization Checks - Insecure Direct Object Reference
- Testing session token strength using Sequencer
- Testing for cookie attributes
- Testing for exposed session variables
- Testing for Cross-Site Request Forgery
Requirements
- Basic Networking
- Basic Web Fundamentals
Description
This course is for Absolute Beginners to Expert levels and Freshers out of college who want to start career with Web Security.
Web App Penetration Testing & Bug Bounty Hunting
1 - How To Setup A Virtual Penetration Testing Lab
2 - Listening for HTTP traffic, using Burp
3 - Getting to Know the Burp Suite of Tools, Know the Burp Suite
4 - Assessing Authentication Schemes
5 - Assessing Authorization Checks
6 - Assessing Session Management Mechanisms
7 - Assessing Business Logic
This course is for Absolute Beginners to Expert levels. A variety of applications with known Web Security vulnerabilities and Web App Penetration Testing.
Testing for browser cache weaknesses - Assessing Authentication Schemes
Testing for account enumeration and guessable accounts -Assessing Authentication Schemes.
Testing for weak lock-out mechanisms -Assessing Authentication Schemes
Account provisioning process via REST API - Assessing Authentication Schemes
Testing for directory traversal - Directory traversal
Assessing Authorization Checks - Local File Include
Assessing Authorization Checks - Remote File Inclusion
Assessing Authorization Checks - Privilege escalation
Assessing Authorization Checks - Insecure Direct Object Reference
Testing session token strength using Sequencer - Assessing Session Management Mechanisms
Testing for cookie attributes - Assessing Session Management Mechanisms
Testing for exposed session variables - Assessing Session Management Mechanisms
Testing for Cross-Site Request Forgery - Assessing Session Management Mechanisms
Above mentioned points will cover in this course which is help you to find Web Security Vulnerabilities and Web App Penetration testing.
Who this course is for:
- Beginner Web App Penetration Testing (Burp Suite A to Z)
- Penetration Testing
- Bug Hunter
- Bug Bounty
- Web App Penetration Testing
- Web Securtiy
- Ethical Hacking
Instructor
- 3.9 Instructor Rating
- 85 Reviews
- 8,712 Students
- 7 Courses
I Have been in the IT & Security Industry for close to 11 years now.
Certification achieved: Certified Ethical Hacker (CEHv10) | F5 -101 Application Delivery Fundamentals | Fortinet Network Security Expert Level 1 to 3: Certified Associate | Certified SOPHOS Firewall Engineer | | Ruckus Wise Level 1 | CCNA | Thycotic- Privileged password security | TrendMicro Deep Security | Palo Alto PCNSE
Alongside got certified expertise on Next-Generation Firewall | Endpoint Protection | IPS | DLP | Encryption | WAF | LTM
Product knowledge include multi OEMs Firewall, IPS, SSL Visibility, Network Security and Endpoint Security & Ransomware attack Investigations.
Delivered multiple Security Deployments across clients: Enterprise and Government sector.
Currently, I am trying to share some of my knowledge by means of Online Teaching via Udemy.