|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/bug-bounty-an-advanced-guide-to-finding-good-bugs/
课程评论：没有评论
**课程名称：** Bug Bounty - 寻找优质漏洞的高级指南 **课程概述：** 本课程旨在帮助学员深入理解并掌握各类 Web 漏洞的利用方法，培养“跳出思维定势”的能力，从而在 Bug Bounty 领域取得更大的成功。课程内容基于真实案例，通过实践操作，让学员不仅了解漏洞是什么，更理解其“如何”被利用以及“为何”会被利用。 **课程亮点：** * **深入漏洞利用：** 学习 SQL 注入、XXE、XSS、RCE、SSTI、目录遍历、访问控制漏洞、认证问题、缓存投毒、信息泄露等多种关键漏洞的深层利用技巧。 * **非常规侦察 (RECON out of the box)：** 掌握非常规的技术进行目标侦察，发现隐藏的攻击面。 * **实战导向：** 通过真实的场景和动手练习，教授学员如何在不同情况下进行创新性思考，最大化漏洞的发现和利用效果。 * **社群支持：** 课程提供私有的 Discord 频道，学员可以参与每周的在线直播hacking会话，与讲师和其他学员交流互动。 **目标学员：** 本课程适合对 Bug Bounty、Web 漏洞挖掘与利用、信息安全有浓厚兴趣的学员。学员应已具备对常见漏洞类型的基本了解，课程侧重于进阶的利用技巧和思维方式，而非零基础入门。 **核心收获：** * 精通多种漏洞的深入 Exploitation。 * 掌握高效的目标分析和攻击路径规划能力。 * 培养在各种场景下“跳出思维定势”的创新解决问题能力。
UPDATE: as of this course becoming the #bestseller on Udemy, we have opened a private discord channel for all students where we do 1 live hacking session per week. Please join the discord after enrolling to attend the live hacking sessions! Thank you for the trust!Bug bounties are evolving year after year and thousands of infosec enthuasiasts are looking to join the boat. Having a great place on that boat requires dedication and investing a great amount of time of work. In fact, there are multiple types of vulnerabilities and mastering the most important of these can be a game changer. In this class, attendees will learn the "how" and "why" of vulnerabilities they are already aware of instead of sticking to what the vulnerability is in general. This class will be based on real-life scenarios to show how to think out of the box in different scenarios to bring in the maximum impact. During the session, students will have hands on excercises with:SQL InjectionXXESSRFRECON out of the boxRCESSTIDirectory TraversalAccess Control VulnsAuthentication IssuesCache PoisoningInfo DisclosureMore subjects to be treatedWho Should Attend This CourseThis course is intended for students with an interest in bug bounties, web vulnerability discovering and exploitation, or general infosec enthusiast who whish to know more about the side of bug bounties. Students should be comfortable with the type of vulnerabilities mentionned because we are not going to cover from a totaly beginner's side.Key TakeawaysStudents will learn in-depth about a vulnerability exploitationStudents will be able to approach a target effectivelyStudents will learn thinking out of the box in different scenarios
