|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/practice-hacking-legally/
课程评论：没有评论
课程名称：合法黑客攻击30个脆弱网站 课程概述：黑客是什么？黑客通常被定义为通过未经授权访问账户或计算机系统来妥协数字设备和网络的行为。虽然黑客行为并不总是具有恶意，但往往与网络犯罪和数据盗窃相关。 什么是网络应用渗透测试？网络应用渗透测试是一系列系统化的步骤，旨在收集有关目标系统的信息，寻找其中的漏洞或缺陷，研究可以利用这些漏洞或缺陷进行破坏的技术，进而突破网络应用的安全。 什么是脆弱网站？网站脆弱性是指软件代码中的缺陷/漏洞、系统配置错误或网站/网络应用及其组件和流程中的其他弱点。网络应用的脆弱性使攻击者能够未经授权访问组织的系统/流程/关键资产。 根据OWASP前10名安全漏洞，最常见的脆弱性包括： 1. SQL注入 2. 跨站脚本 3. 身份验证和会话管理漏洞 4. 不安全的直接对象引用 5. 跨站请求伪造 6. 安全配置错误 7. 不安全的加密存储 8. URL访问限制失败 9. 不足的传输层保护 10. 未经验证的重定向和转发 作为一名黑客需要学习哪些技能？高级计算机技能包括数据库管理、编程和在电子表格中运行计算。一些最基本的计算机技能包括MS Office、电子表格、电子邮件、数据库管理、社交媒体、网络和企业系统等。伦理黑客需要成为计算机系统的专家。
What is Hacking?A commonly used hacking definition is the act of compromising digital devices and networks through unauthorized access to an account or computer system. Hacking is not always a malicious act, but it is most commonly associated with illegal activity and data theft by cyber criminals.What is Web Application Penetration Testing?Web application penetration testing involves a methodological series of steps aimed at gathering information about the target system, finding vulnerabilities or faults in them, researching for exploits that will succeed against those faults or vulnerabilities and compromise the web application.What is a vulnerable website?A website vulnerability is a software code flaw/ bug, system misconfiguration, or some other weakness in the website/ web application or its components and processes. Web application vulnerabilities enable attackers to gain unauthorized access to systems/ processes/ mission-critical assets of the organization.The Top 10 security vulnerabilities as per OWASP Top 10 are:SQL InjectionCross Site ScriptingBroken Authentication and Session ManagementInsecure Direct Object ReferencesCross Site Request ForgerySecurity MisconfigurationInsecure Cryptographic StorageFailure to restrict URL AccessInsufficient Transport Layer ProtectionUnvalidated Redirects and ForwardsWhat do I need to learn to be a hacker?Advanced computer skills include managing databases, programming, and running calculations in spreadsheets. Some of the most essential computer skills are MS Office, Spreadsheets, Email, Database Management, Social Media, Web, Enterprise systems, etc. An ethical hacker needs to be a computer systems expert
