Web Application Security Testing Essential Training

Basics Of Web Application Penetration Testing

Created bynikhalesh bhadoria

Last updated 11/2015

English

What you'll learn

Over 11 lectures and 1 hour of content
Learn owasp top 10 vulnerabilities
Learn how to perform web pentesting

Course content

11 sections • 15 lectures • 1h 3m total length

Introduction2:03
Lab setup6:39
Lab

SQL Injection5:26
Explore how sql injection exploits a vulnerable app to enumerate information_schema databases, reveal table and column details, and expose user credentials and admin data.
HTML Injection1:40
Explore HTML injection and its reflected variant in web applications, and learn how injection can affect user accounts and page content.
IFRAME Injection2:13
Explore iframe injection vulnerabilities in web applications and how unauthorized downloads and automatic execution can occur. Learn defensive testing techniques to identify and mitigate these exploits.
SSI Injection3:09
Explore ssi injection in a Debian-like environment through a hands-on demo, examining file system access, permissions, and potential command-related risks.

Requirements

Basic IT Skills
Working Internet Connection

Description

This course is designed for budding all backgrounds and experience levels to start Manual web application security testing with owasp standards. The course is structured according to OWASP Top 10 from A1 to A10 vulnerabilities. In each of the OWASP Top 10 vulnerabilities each and every video have a description about attack and Example vulnerabilities and attacks plus in this course you will going to learn about lab designed to be a highly-focused on Web Application Security Testing and course free and open source deliberately insecure web application. It helps security enthusiasts developers and students to discover and to prevent web vulnerabilities. So also perform hand on OWASP Top 10 vulnerabilities.

Who this course is for:

Security testers
Students
Web Developer
IT Security Professionals
Hacker
Anyone Who Interested In Securing Web Security

Web Application Security Testing Essential Training

What you'll learn

Explore related topics

Course content

01. Introduction2 lectures • 9min

02. Injection4 lectures • 12min

03. Broken Authentication and Session Management1 lecture • 5min

04. Cross-Site Scripting (XSS)1 lecture • 5min

05. Insecure Direct Object References1 lecture • 3min

06. Security Misconfiguration1 lecture • 8min

07. Sensitive Data Exposure1 lecture • 5min

08. Missing Function Level Access Control1 lecture • 6min

09. Cross-Site Request Forgery (CSRF)1 lecture • 4min

10. Using Components with Known Vulnerabilities1 lecture • 4min

Requirements

Description

Who this course is for: