آموزش هک و نفوذ برنامه های تحت وب

 This short aims at familiarizing you to the basics of web application and penetration testing. However, we take a step further to explain the real life scope and application of this course. Once you have gone through the basics, you will gain control over a particular area of online security as your soon-to-be area of expertise. In this course, we will take you through an array of manual penetration testing techniques. No understanding of special tools, or third party app download is required to get started. The focus of this course is manual testing, with their application applicable to real life internet security based scenarios. Besides, whatever you will learn throughout manual penetration testing courses, it is far better than automated tools etc. SECTION 1: INTRODUCTION 1 Caution 00:10 Preview 2 About Course 01:31 Preview 3 Introduction To Web Application Penetration Testing 05:32 4 Introduction To OWASP 02:00 SECTION 2: GETTING STARTED 5 Knowledge Requirement 02:33 6 Choosing Browser And Installation 04:23 7 Choosing Mozilla Addons And Burp Suite 11:16 SECTION 3: GOOGLE HACKING AND GOOGLE DORKS 8 Google Dorking 05:49 9 Finding Subdomains 06:26 SECTION 4: INJECTION 10 Basic Of SQL Injection 01:40 11 Basic SQL Injection With Login Query 06:57 12 Union Based SQL Injection 06:16 13 Blind SQL Injection 08:56 14 Header Based SQL Injection 09:48 15 Real Life Scenario 06:53 SECTION 5: BROKEN AUTHENTICATION AND SESSION MANAGEMENT 16 Basics Of Broken Authentication And Session Management 01:49 17 Authentication Bypass With Bruteforce 07:21 18 Username Enumeration 06:02 SECTION 6: CROSS SITE SCRIPTING (XSS) 19 Getting Start with XSS 03:23 20 Reflected XSS 08:11 21 Stored Xss 06:33 22 Difference Between Self And Stored XSS 04:37 SECTION 7: INSECURE DIRECT OBJECT REFERENCES 23 Basics Of Insecure Direct Object References 07:18 SECTION 8: SECURITY MISCONFIGURATION 24 Basic Of Security MisConfiguration 06:54 SECTION 9: SENSITIVE DATA EXPOSURE 25 Introduction To Sensitive Data Exposure 01:55 26 Clickjacking And PHP Server Config Page 08:31 SECTION 10: MISSING FUNCTIONAL LEVEL ACCESS CONTROL 27 Basics Of Functional Level Access Control 07:13 SECTION 11: USING COMPONENT WITH KNOWN VULNERABILITY 28 Getting Start With Components With Known Vulnerability 03:18 SECTION 12: CROSS SITE REQUEST FORGERY (CSRF/XSRF) 29 Basics Of Cross Site Request Forgery 17:01 SECTION 13: UNVALIDATED REDIRECTS AND FORWARDS 30 Basics On Unvalidated Redirect And Forwards 03:14 SECTION 14: BUSINESS LOGIC VULNERABILITIES 31 What Is Business Logical Issues? 04:24 SECTION 15: CONCLUSION