Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Web Application Hacking & Security for beginners
Rating: 4.3 out of 5(379 ratings)
1,916 students

Web Application Hacking & Security for beginners

Learn how about the tools and techniques to perform pen testing and ethical hacking on web applications
Created byRassoul Zadeh
Last updated 3/2023
English
English [Auto],

What you'll learn

  • Introduction to web penetration testing and ethical hacking
  • Designing and building a lab environment for pen testing
  • Understanding website vulnerabilities and general attacks
  • Understanding how to protect your website against attacks
  • Secure coding and web application firewalls

Course content

5 sections • 20 lectures • 2h 8m total length

  • Introduction2:52

    Introduce web application security and penetration testing with Kali Linux for beginners. Build a hands-on lab to practice testing, vulnerability assessment, and securing web applications.

  • Web Application Security4:08

    Explore web application security basics, including common vulnerabilities and W.A.S.P. top 10, server misconfigurations, and secure development, with Kali Linux-based testing and client engagement to improve security posture.

  • OWASP Top 10 vulnerabilities4:43

    Explore the OWASP top 10 vulnerabilities for web apps. Learn risks such as injection, broken authentication, external entities, and insecure deserialization, plus cross-site scripting, and insufficient logging.

  • Vulnerability Assessment vs Penetration Testing5:12

    Compare vulnerability assessment and penetration testing, explaining threats, vulnerabilities, and risks, and show how exploitable vulnerabilities drive ethical hacking and risk-based security reporting.

  • Ethical Hacker Responsibilities and Customer Expectations4:47

    Identify security issues within the contract scope and communicate clearly with the customer to improve the application's security posture. Maintain confidentiality, seek management approval, and fully disclose findings and fixes.

  • Thank you!0:13

Requirements

  • General knowledge about internet and website development
  • General knowledge about Linux and networking

Description

A website vulnerability is a weakness or misconfiguration in a website or web application code that allows an attacker to gain some level of control of the site, and possibly the hosting server. Most vulnerabilities are exploited through automated means, such as vulnerability scanners and botnets. There are a lot of common web application vulnerabilities as a result of insecure code development practices or using vulnerable software, some examples are: SQL Injection, Cross Site Scripting (XSS), Command Execution, File Injection, Cross Site Request Forgery (CSRF), etc.


Kali Linux is a Linux distribution that is specialized for cybersecurity. It is an open-source product that involves a lot of customization for penetration testing, which helps companies to understand their vulnerabilities. It is maintained and funded by Offensive Security.


A web application firewall (WAF) protects web applications from a variety of application layer attacks such as cross-site scripting (XSS), SQL injection, and cookie poisoning, among others. Attacks to apps are the leading cause of breaches—they are the gateway to your valuable data.


In this course, you will learn about web application ethical hacking techniques including using some Kali Linux tools:

  • Introduction to web penetration testing and ethical hacking

  • Designing and building a lab environment for pen testing

  • Understanding website vulnerabilities and general attacks

  • Understanding how to protect your website against attacks

  • Secure coding and web application firewalls


Who this course is for:

  • Cybersecurity juniors and students
  • Beginner Application Security Learners
  • Beginner Penetration testers
  • Web Application developers
  • Junior Security professionals

Report abuse