|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/full-stack-attacks-on-modern-web-applications/
课程评论：没有评论
课程名称：现代网络应用的全栈攻击 概述：网络应用安全不仅仅涉及跨站脚本（XSS）和 SQL 注入。专业的渗透测试人员和红队成员需要学习现代网络应用的全栈攻击。此课程旨在帮助您深入了解这一主题。在课程中，您将学习到三种强大的攻击方式。首先，我将展示攻击者如何通过 HTTP 参数污染绕过授权。接下来，我将介绍攻击者如何发起子域名接管攻击。最后，我将演示攻击者如何通过点击劫持接管用户账户。每个攻击示例都有演示，您将一步步学习这些攻击的实际运作方式。此外，您还将了解到如何检查您的网络应用是否容易受到这些攻击的影响。希望这些内容能引起您的兴趣，期待在课堂上见到您。 案例简介： 案例 #1：HTTP 参数污染 - 第一部分 案例 #1：HTTP 参数污染 - 第二部分 案例 #2：子域名接管 - 第一部分 案例 #2：子域名接管 - 第二部分 案例 #3：通过点击劫持接管账户 - 第一部分 案例 #3：通过点击劫持接管账户 - 第二部分 备注：您可以通过漏洞赏金计划为这些漏洞获取报酬。
Web application security is not only about XSS and SQL injection. Professional penetration testers and red team members must learn about full-stack attacks on modern web applications and I created this course to help you on this journey. In this course, you will learn about 3 powerful attacks. First, I'll show you how an attacker can bypass authorization via HTTP parameter pollution. Next, I'll present how the attacker can launch a subdomain takeover attack. Finally, I'll demonstrate how the attacker can take over a user's account via clickjacking.** For every single attack presented in this course there is a demo ** so that you can learn step by step how these attacks work in practice. You'll also learn how to check if your web applications are vulnerable to these attacks. I hope this sounds good to you and I can't wait to see you in the class.Case #1: HTTP Parameter Pollution - Part 1Case #1: HTTP Parameter Pollution - Part 2Case #2: Subdomain Takeover - Part 1Case #2: Subdomain Takeover - Part 2Case #3: Account Takeover via Clickjacking - Part 1Case #3: Account Takeover via Clickjacking - Part 2Note: you can get paid for these bugs in bug bounty programs.
