|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ethical-hacking-file-inclusion/
课程评论：没有评论
**课程总结：Coursera 道德黑客：文件包含漏洞** 本课程专为新手黑客设计，无需任何编程或黑客经验。课程将深入探讨 Web 应用中常见的安全漏洞，特别是本地文件包含（LFI）和远程文件包含（RFI）漏洞。 **课程内容亮点：** * **理解文件包含漏洞：** 学习 LFI 和 RFI 的原理，以及它们如何影响 Web 应用的安全。 * **发现与利用：** 掌握如何识别网站中是否存在文件包含漏洞，并学习如何利用这些漏洞来入侵服务器。 * **防御策略：** 作为开发者，学习如何有效预防和修复这些安全隐患。 * **实际操作：** 课程提供实际的黑客攻击案例，供学员在自己的实验环境中进行尝试。 * **黑客的通用步骤：** 了解黑客在进行攻击时通常遵循的通用步骤，包括扫描目标服务器、识别操作系统（Linux/Windows）等。 * **间接攻击：** 探索如何通过 SSH 或 RDP 等其他协议间接利用文件包含漏洞。 通过本课程，学员将能够理解并实践文件包含漏洞的利用和防御，从而为深入学习网络安全打下坚实基础。
In this course you will learn about Local File Inclusion (LFI), Remote File Inclusion (RFI) and other vulnerabilities that may exist in web apps. You will learn how to prevent them as a developer and how you can leverage them to hack into servers. The course contains examples hack, that you could try on your own home lab.For this vulnerability to work, the website needs to have a file inclusion vulnerability. But, if it's present you might either hack the server directly or indirectly through another protocol like SSH or RDP. The course will also show you about the steps every hacker takes, regardless of what is the target. You'll learn how to scan for apps running on a server and how you might disclose if the target is running a Linux or Windows server.If you are new to hacking, this course is for you. You'll be able to hack a server, given this vulnerability is present in the web app. It's a beginners course and you don't need any prior experience. No programming experience is needed, but we will go over a tiny bit of programming. However, as this is a hacking course the main focus is on that.
