|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/introduction-to-web-application-penetration-testing/
课程评论：没有评论
课程名称：网络应用程序渗透测试入门 课程概述：本课程将教您手动进行网络应用程序的基本渗透测试及使用各种自动化渗透测试工具，并结合不同的人工智能技术。我们将比较三种不同AI（包括ChatGPT、PenTestGPT和WhiteRabbitNeo AI）在渗透测试中提供的不同答案，探讨使用AI进行渗透测试的潜在缺陷。课程还将包含一些没有使用自动化工具的手动测试，以帮助您更好地理解如何利用漏洞，从而避免AI和自动化渗透测试中可能出现的假阴性现象。此外，我还将披露一份获得许可的信息安全报告，以便您了解如何撰写报告给HackerOne及其他网络应用程序渗透测试的漏洞奖励和漏洞披露计划。 请注意，本课程仅供教育目的使用，旨在教授人们进行伦理黑客的技能，并包含高级网络安全技术，适合任何人学习。请不要将课程内容用于非法活动，我对因学习和应用本课程而引起的系统损害或伤害不承担责任。该课程适合希望成为漏洞赏金猎人和白帽黑客的人，帮助他们为更安全的网络环境做好准备并减轻网络风险。
In this course, you'll learn the basics of performing basic penetration tests on web applications manually and using automated penetration testing tools with the help of different Artificial Intelligence that exist out there. We will compare the differences and answers given by three different AI's including ChatGPT, PenTestGPT and WhiteRabbitNeo AI and see the negative sides of using AI as a whole when performing these penetration tests. We will perform some manual tests without using automated tools to better understand how vulnerabilities can be exploited without getting any false negatives that are present when using AI and automation for penetration tests; I will also disclose a duplicate report that I obtained permission for to disclose to the public which I was allowed to disclose, so you have an idea on how to write reports to HackerOne and other Web Application Penetration Testing Bug Bounties and Vulnerability Disclosure Programs.Please note that this course is for educational purposes only. This course is intended to teach people to perform ethical hacking and contains highly sophisticated cybersecurity techniques which can be used by anyone. Do not use anything taught in this course illegally, I will not be responsible for any damage or harm caused to a system from what you learn and apply from this course. This course is for people who want to become Bug Bounty Hunters and White Hat Hackers to prepare and refresh them for a better world of security and help in mitigating cyber risks.
