WebHack for Ethical Hacking / Ultimate Defensive Skills

Let's dig into the core principles of the top 5 common vulnerabilities in web applications and learn how to fix them.


What you'll learn
Understanding the principles of SQL injection hacking techniques and learning the most effective ways to defend against them.
We'll take a detailed look at cross-site scripting (XSS), an attack technique that exploits vulnerabilities in web browsers, and explore ways to prevent it.
Let's find out how weak the passwords we use in daily life can be, and work on using stronger passwords.
Let's learn how dangerous it can be if common files like images or zip files we upload are misused, and work on preventing the upload of malicious files.
Let's explore the various and potential dangers that system commands entered through web pages can cause, and find out how to prevent them.

Requirements
Some web programming experience, basic knowledge of databases, and basic command usage in Windows Command Prompt and Linux.

Description
This course aims to identify and prevent the fundamental causes of many hacking techniques seen on websites worldwide. It's packed with practical content to help aspiring security professionals interested in ethical hacking learn a lot. For solid defense, nothing beats experimenting with attacks yourself. Whether you're an ethical hacker advising others, a web developer defending your own site, or a server administrator designing overall security for servers and websites, this course has got you covered.
We'll explore the main culprits behind numerous security incidents over the years, focusing on the key issues highlighted in the OWASP Top 10 list. These are classified into five categories: "SQL Injection," "XSS Attack," "File Upload Attack," "Password Cracking," and "Command Injection Attack." These vulnerabilities have been and will continue to be potential threats causing significant security incidents.
As mentioned before, the best way to prepare is by directly experimenting with these attacks to understand their roots clearly. We've set up an environment that you can use as a lab for these experiments.
We're using Docker container technology, which is widely used nowadays, to set up machines for different roles: one acting as the hacker, another as the web server, and another as the web administrator. You can take on the role of an ethical hacker or a web server administrator. This lab will be continuously updated as the course evolves. For example, new web servers or firewalls with special roles might be added to address emerging vulnerabilities, and the number of machines acting as ethical hackers might increase.
Although the Docker containers are configured to be set up on Windows, the technology originally works on Linux, so there shouldn't be any difficulty applying it across different operating systems. The content is structured to explain hacking techniques with inserted videos demonstrating actual experiments at the right moments.
If you have a basic understanding of web development, you should find it easy to follow along. We're using PHP, but since its syntax is almost identical to C, which is the ancestor of most programming languages, web programmers using Python or Java shouldn't have much trouble understanding it. The database used is MySQL, and only basic SQL statements are covered, so you don't need advanced knowledge of complex queries.
Security ultimately hinges on how broadly you can see and understand the entire landscape. It's not about possessing a few advanced technical skills but about connecting and comprehensively understanding a wide range of knowledge. Vulnerabilities can appear anywhere.
I hope everyone can find some value in this course, even if it's just a little help. That would make me very happy.
Who this course is for:
Beginner web developers interested in web security, developers or server administrators who need to understand web security professionally, IT consultants, and anyone looking to obtain a security certification in ethical hacking.

More Info