|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/security-testing-basics-getting-started-for-beginners/
课程评论：没有评论
课程名称：安全测试基础（初学者入门） 课程概述：本课程专为想要入门安全测试的初学者设计，涵盖了所有必要的安全测试知识。无论你是初学者，还是刚刚开始接触安全测试领域，本课程都有助于你判断自己是否适合这一领域。课程内容包括安全测试的重要性、未来就业前景、与软件测试的转型指导等基本知识。通过学习，你将了解安全测试的各种基本主题，包括但不限于： - 什么是安全测试以及其重要性，并结合示例分析。 - 职业前景（包括就业机会、技能短缺、需求、失业率、薪酬水平和职业建议）。 - 安全测试与漏洞评估、渗透测试的区别。 - 为什么安全测试与黑客活动之间有明确的界限。 - 手动安全测试与安全测试工具的区别。 - CIA三元组：安全测试的基本高层目标。 - 漏洞、威胁与风险的关系。 - HTTP方法与状态码的基础。 - Cookie的基本知识及其与会话ID的区别。 - 加密学及其不同技术，包括对称加密和非对称加密。 - HTTP的无状态特性与HTTPS的应用。 - 输入验证与输出编码的基本概念。 - SSL与TLS的区别以及HTTP与HTTPS的区别。 - 认证与授权的基础术语。 - 安全测试术语：有效载荷与恶意输入，动态应用安全测试（DAST）。 - 安全测试过程在软件开发生命周期（SDLC）中的位置。 - OWASP Top 10 漏洞的概述及SQL注入的基本概念。 - 实践演示，包括使用BurpSuite工具进行请求拦截和WebGoat的安装。 通过本课程，你将获得进入安全测试领域所需的基本知识和实践经验，为未来的职业发展打下坚实的基础。
In this course, I have covered all the Security Testing that are required for Beginners to get started with.If you are a beginner or fresher or new to Security Testing, and want to figure out whether this Security Testing field is for you or not, then this course is for you. This is an overview course, where by the end of this course, you can find out whether Security Testing is for you or not, its opportunities, basic knowledge and guidance required for moving into Security Testing field from Software Testing field. The below are the different basic topics that are covered in this course:What is Security Testing?Importance of Security Testing with ExamplesFuture (Jobs, Skill Shortage, Demand, unemployment rate, Pay scale and Career Advice)Security Testing versus Vulnerability Assessment versus Penetration TestingSecurity Testing Versus HackingDon't end up in JailManual Security Testing Versus Security Testing ToolsCIA Triad - Basic High Level Objectives of Security TestingSecurity Testing - Vulnerability versus Threat versus RiskSecurity Testing (Basics) - HTTP MethodsSecurity Testing (Basics) - HTTP Status CodesSecurity Testing (Basics) - CookieSecurity Testing (Basics) - Cookie versus Session ID versus SessionSecurity Testing (Basics) - Cryptography and different TechniquesSecurity Testing (Basics) - Symmetric Key EncryptionSecurity Testing (Basics) - Asymmetric Key EncryptionSecurity Testing (Basics) - Symmetric & Asymmetric Key SizesSecurity Testing (Basics) - Finding Asymmetric Key Encryption used by different websitesSecurity Testing (Basics) - Encoding and DecodingSecurity Testing (Basics) - HashingSecurity Testing (Basics) - HTTP is StatelessSecurity Testing (Basics) - HTTPSSecurity Testing (Basics) - Input Validation and Output EncodingSecurity Testing (Basics) - Client Side Validation versus Server Side ValidationSecurity Testing (Basics) - Blacklisting versus Whitelisting (Input Validation)Security Testing Basics - SSL versus TLSSecurity Testing Basics - HTTP versus HTTPSSecurity Testing Basics - Authentication vesus AuthorizationSecurity Testing Terminology - Payloads and Malicious InputSecurity Testing Terminology - DASTSecurity Testing - Demo Application for PracticeSecurity Tesitng Process (Testing Phase of SDLC)OWASPOWASP Top 10 Vulnerabilities Injection vulnerability and different typesSQL Basics for SQL InjectionAttack Surface and Attack VectorSQL Injection (SQLi) Anatomy of SQL Injection PayloadSecurity Testing - Second Demo Application for PracticeSQL Injection Payload - Vulnerability Assessment SQL Injection Attack SurfaceInstalling BurpSuiteUsing BurpSuite as Proxy Tool for Intercepting Requests Configuring BurpSuite as Proxy with Firefox browserConfiguring BurpSuite as Proxy for Chrome browserConfiguring BurpSuite as Proxy for Internet Explorer browserInstalling WebGoatBypassing Client Side Validation using BurpSuiteIncreasing Attack Surface using BurpSuite
