Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Learn Step by Step Web Hacking and Penetration Testing
Rating: 4.7 out of 5(823 ratings)
7,459 students

Learn Step by Step Web Hacking and Penetration Testing

You will learn hacking tools, methodologies and techniques and and learn how to secure them from these hackers.
Created byGabriel Avramescu
Last updated 12/2019
English
English [Auto],

What you'll learn

  • Understand and perform the basic steps in order to performa penetration testing of a web application
  • Understand web application's security principles and potential dangers
  • Be able to gather information about your target
  • You will learn how to find vulnerabilities in your target web application
  • Exploit found vulnerabilities and get control over remote servers
  • Understand the penetration testing process
  • As a web application developer you will understand how to secure your application

Course content

11 sections • 46 lectures • 9h 23m total length

  • Introduction1:14

    About myself and this course

  • Core Problems - Why Web Security7:33

    In this video are presented most why web application security is so important and how they developed over the years

  • Web Technologies30:00

    You will familiarise yourself with web technologies. It is important to have a good foundation before going forward.

  • Preparing the Lab Environment8:31

    You will be guided trough the step required to install required tools and services in order to create a testing lab.

  • Information Gathering using Search Engines and Social Networks - part 112:58

    Discover information gathering using multiple search engines and social networks to uncover country-specific results, specialized operators, and cross-referencing by IP for penetration testing.

  • Information Gathering using Search Engines and Social Networks - part 217:17
  • Join Our Online Classroom!0:54

Requirements

  • Basic IT skills
  • Basic knowledge of Linux and/or Windows
  • Understand basic computer networking

Description

In order to protect yourself from hackers, you must think as one.

This training is based on a practical approach of day-by-day situations and it contain labs based on real environments.


In this course, you will start as a beginner with no previous knowledge about penetration testing or hacking.

This course is focused on the practical side of penetration testing without neglecting the theory behind each attack. Before jumping into penetration testing, you will first learn how to set up a lab and install needed software to practice penetration testing on your own machine. 

The course objective is to help you learn to master the (ethical) hacking techniques and methodology that are used in penetration systems. The course is designed for IT passionate, network and system engineers, security officers.

Once you understand how websites work we will start talking about how can we exploit these components. This course will take you from a beginner to a more advanced level -- so you will be able to launch attacks and test the security of websites and web applications, and furthermore  you'll be able to help fixing these vulnerabilities and secure websites from them. 

Below are the main topics, both theoretical and practical, of this course:

  • Core problems (Causes. Defences)

  • Web Technologies (HTTP Protocol, Web Functionality, Encoding)

  • Mapping (Spidering and Analysing)

  • Attacking Authentication (Technologies, Flaws, Fixes, Brute Force)

  • Attacking Session Management (State, Tokens, Flaws)

  • Attacking Access Controls (Common Vulnerabilities, Attacks)

  • Attacking Data Stores (SQL Injection, Bypassing Filters, Escalation)

  • Bypassing Client-Side Controls (Browser Interception, HTML interception, Fixes)

  • Attacking the server (OS command Injection, Path Traversal, Mail Injection, File Upload)

  • Attacking Application Logic

  • Cross Site Scripting

  • Attacking Users (CSRF, ClickJacking, HTML Injection)

  • OWASP Top Ten Vulnerabilities

  • Network Attacks

Labs:

  • Spidering, Website Analyser

  • Brute-Force

  • Session Hijacking via Mann-in-The-Middle

  • Get Gmail or Facebook Passwords via SSLStrip

  • SQL Injection

  • Upload File and Remote Execution

  • Cross-Site Scripting (Stored + Reflected, Cookie Stealing, Preventing XSS)

  • CSRF (Change password trough CSRF vuln., Preventing CSRF)


NOTE: This course is created only for educational purposes  and all the attacks are launched in  an isolated lab environment.

Who this course is for:

  • Web developers
  • Anyone who want to learn the ethical hacking and penetration testing process
  • IT students and/or passionate
  • Anyone who wants to start or develop a career in it security field or as "ethical hacker"

Report abuse