Learn Step by Step Web Hacking and Penetration Testing

You will learn hacking tools, methodologies and techniques and and learn how to secure them from these hackers.

What you'll learn

Understand and perform the basic steps in order to performa penetration testing of a web application
Understand web application's security principles and potential dangers
Be able to gather information about your target
You will learn how to find vulnerabilities in your target web application
Exploit found vulnerabilities and get control over remote servers
Understand the penetration testing process
As a web application developer you will understand how to secure your application

Requirements

Basic IT skills
Basic knowledge of Linux and/or Windows
Understand basic computer networking

Description

In order to protect yourself from hackers, you must think as one.

This training is based on a practical approach of day-by-day situations and it contain labs based on real environments.


In this course, you will start as a beginner with no previous knowledge about penetration testing or hacking.

This course is focused on the practical side of penetration testing without neglecting the theory behind each attack. Before jumping into penetration testing, you will first learn how to set up a lab and install needed software to practice penetration testing on your own machine.

The course objective is to help you learn to master the (ethical) hacking techniques and methodology that are used in penetration systems. The course is designed for IT passionate, network and system engineers, security officers.

Once you understand how websites work we will start talking about how can we exploit these components. This course will take you from a beginner to a more advanced level – so you will be able to launch attacks and test the security of websites and web applications, and furthermore you'll be able to help fixing these vulnerabilities and secure websites from them.

Below are the main topics, both theoretical and practical, of this course:

Core problems (Causes. Defences)

Web Technologies (HTTP Protocol, Web Functionality, Encoding)

Mapping (Spidering and Analysing)

Attacking Authentication (Technologies, Flaws, Fixes, Brute Force)

Attacking Session Management (State, Tokens, Flaws)

Attacking Access Controls (Common Vulnerabilities, Attacks)

Attacking Data Stores (SQL Injection, Bypassing Filters, Escalation)

Bypassing Client-Side Controls (Browser Interception, HTML interception, Fixes)

Attacking the server (OS command Injection, Path Traversal, Mail Injection, File Upload)

Attacking Application Logic

Cross Site Scripting

Attacking Users (CSRF, ClickJacking, HTML Injection)

OWASP Top Ten Vulnerabilities

Network Attacks

Labs:

Spidering, Website Analyser

Brute-Force

Session Hijacking via Mann-in-The-Middle

Get Gmail or Facebook Passwords via SSLStrip

SQL Injection

Upload File and Remote Execution

Cross-Site Scripting (Stored + Reflected, Cookie Stealing, Preventing XSS)

CSRF (Change password trough CSRF vuln., Preventing CSRF)


NOTE: This course is created only for educational purposes and all the attacks are launched in an isolated lab environment.

Who this course is for:

Web developers
Anyone who want to learn the ethical hacking and penetration testing process
IT students and/or passionate
Anyone who wants to start or develop a career in it security field or as "ethical hacker"