|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/complete-ethical-hacking-series-hacking-databases/
课程评论：没有评论
课程名称: 网络黑客系列：数据库黑客 课程概述: 《网络黑客系列：数据库黑客》是针对初学者和IT专业人士的课程，旨在帮助学员获得认证并找到起薪超过六位数的网络安全入门职位。每个章节结束时都有练习，让学员能够立即将新学到的技能应用于实践。课程将从理解网络匿名性开始，使用Tor、Tortilla和Proxy Chains等工具。 课程先决条件: 学员应具备TCP/IP和网络概念的基本知识。 学习目标: - 搭建MySQL和Oracle安全测试实验室，测试数据库黑客技能。 - 使用“第一顺序SQL注入”技术攻击数据库，这是攻击者利用恶意SQL语句控制Web应用程序数据库服务器的一种注入攻击。 - 使用Zed Attack Proxy进行数据库信息收集，OWASP ZAP是一个开源Web应用程序安全扫描器，适合新手与专业渗透测试人员使用。 - 学习如何强化数据库及其底层操作系统平台，以最大化安全性，包括数据库监听器的加固及其身份验证和授权参数的配置。 - 使用Shodan收集来自互联网上开放数据库和物联网设备的信息，Shodan是全球首个针对互联网连接设备的搜索引擎。 该课程为希望进入网络安全领域的学员提供了宝贵的知识和实用技能。
Cyberhacker Series: Hacking Databases This course is for beginners and IT pros looking to get certified and land an entry level Cyber Security position paying upwards of six figures! Each chapter closes with exercises putting your new learned skills into practical use immediately. You will start by understand network anonymity by using tools such as Tor, Tortilla and Proxy Chains. What are the pre-requisites for this course? Students should have a working understanding of TCP/IP and networking concepts. What will you be able to do after taking this course? Build a MySQL and Oracle security testing lab - Build out a database security lab and test your database hacking skills following exercises in the course. Attack databases using 'first-order SQL injection' techniques - SQL Injection (SQLi) refers to an injection attack wherein an attacker can execute malicious SQLstatements (also commonly referred to as a malicious payload) that control a web application's database server (also commonly referred to as a Relational Database Management System - RDBMS). Use the Zed Attack Proxy for data collection on database information - OWASP ZAP (short for Zed Attack Proxy) is an open-source web application security scanner. It is intended to be used by both those new to application security as well as professional penetration testers. Learn how to harden the Database and the underlying OS platform to maximize security - Harden the database listener and configure authentication and authorization parameters for the database and underlying operating system. Use Shodan to collect information from open databases and IoT devices on the web - Shodan is the world's first search engine for Internet-connected devices.
