|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/burp-suite-tutorial-basic-to-advanced/
课程评论：没有评论
**课程名称：Burp Suite 从基础到高级（赏金猎人和 Web 应用渗透测试）** **课程概述：** 本课程旨在教授学员如何使用 Burp Suite，这是 Web 应用渗透测试、道德黑客和赏金猎人领域的强大工具。课程将从基础知识讲起，逐步深入到高级功能，帮助学员掌握使用 Burp Suite 进行 Web 应用安全测试和漏洞挖掘的各项技能。 **课程重点：** * **Burp Suite 核心功能：** 学习 Burp Suite 作为拦截代理的基础用法。 * **漏洞检测与利用：** 掌握使用 Burp Suite 检测和利用各类 Web 应用漏洞，包括但不限于 SQL 注入 (SQLi)、跨站脚本 (XSS)，以及 OWASP Top 10 中列出的常见漏洞。 * **高级功能探索：** 深入了解 Burp Suite Professional 的高级工具集，包括其先进的漏洞扫描器。 * **OAST（带外安全测试）：** 了解 PortSwigger 在 OAST 领域的创新，以及 Burp Scanner 如何零配置地实现 OAST 并应用于多种漏洞类型。 * **Burp Suite Enterprise Edition：** 了解其如何帮助企业实现大规模、可扩展的 Web 应用安全扫描，包括计划性扫描、报告仪表板、角色访问控制和与 CI/CD 的集成（插件、Jira 支持、API）。 * **行业标准：** 认识到 Burp Suite 已成为 Web 安全专业人士事实上的标准工具集，被全球众多组织和个人广泛使用。 **目标学员：** * Web 应用渗透测试人员 * 道德黑客 * 赏金猎人 * 对 Web 应用安全感兴趣的开发者、安全工程师等 **学习收益：** 通过本课程，学员将能够熟练运用 Burp Suite，高效地发现和分析 Web 应用中的安全漏洞，为 Web 应用的安全加固提供专业支持，并为参与赏金计划打下坚实基础。
Burp suite is the best tool for web application pentester, Ethical Hacker, Bug Bounty Hunter. In this course you can learn Burp suite from Basic to advance level. Burp Suite Professional is an advanced set of tools for finding and exploiting vulnerabilities in web applications - all within a single product. From a basic intercepting proxy to a cutting edge vulnerability scanner. Burp Suite can be used to test and report on a large number of vulnerabilities including SQLi, XSS and the whole OWASP top 10. PortSwigger pioneered out-of-band security testing (OAST) and Burp scanner was the first product to make OAST available out-of-the-box with zero configuration and to apply it to a wide range of vulnerability types. The Burp Suite Enterprise Edition enables businesses to secure their entire web portfolio with simple, scalable, scanning using the same cutting-edge Burp scanner technology. The Enterprise Edition performs recurring, scheduled scans across thousands of applications, with intuitive reporting dashboards, role-based access control and scan reports. It can provide out-of-the- box integration with ready made CI plugins, native Jira support and rich API's to enable security incorporation into existing software development processes. PortSwigger Web Security is a global leader in the creation of software tools for the security testing of web applications. The software (Burp Suite) is well established as the de facto standard toolkit used by web security professionals. Burp Suite is used by more than 47,000 individuals at 12,500 organizations, in over 140 countries. Used across the majority of industry sectors, in organizations both large and small.
