|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/web-3-dapps-smart-contracts-for-pentesting-bug-bounties-by-hacktify/
课程评论：没有评论
课程名称：Web 3.0 DApps 与智能合约渗透测试及漏洞赏金 2025 概述：本课程旨在教授 Web 3 安全知识，帮助学员识别智能合约中的漏洞，以便进行渗透测试（Pentesting）和漏洞赏金（Bug Bounty）。课程内容包括： - 攻击的基本原理、利用方法以及防御策略。 - 区块链的概念及其工作原理。 - 去中心化应用（DApps）和智能合约的基本知识。 - 设置实验室以便对智能合约进行渗透测试。 - 使用 Metamask 及其安装。 - 安装 Hardhat 和设置 Remix IDE。 - Remix 中函数的实际操作。 - Solidity 中的视图函数和纯函数的实践。 - Solidity 中的数据映射（Mappings）和智能合约的部署。 - Solidity 中的安全漏洞实例，包括整数溢出和下溢的实际例子。 - 如何使用 Ethernaut Playground 查找漏洞。 - Solidity 中的自销毁（Selfdestruct）函数和回调函数（Fallback Functions）的处理。 - 强制挑战、重入问题和私有变量的使用。 - 使用 Hardhat 测试智能合约。 - 以 Parity 钱包攻击为例进行概念验证（PoC）。 - 如何在 Web 3 漏洞赏金平台（如 Immunefi 和 Hackenproof）上进行漏洞猎杀。 - 如何撰写专业的报告。 本课程提供全天候支持，学员如有任何问题可在问答区提出，我们会尽快予以回复。 注意：本课程仅供教育目的，所进行攻击的所有网站均已进行道德报告和修复。对没有负责任披露政策的网站进行测试是不道德的且违反法律，课程作者对此不承担任何责任。
Learn about Web 3 Security and How to identify vulnerabilities in Smart Contracts for Pentesting & Bug Bounties.Here's a more detailed breakdown of the course content:In all the sections we will start the fundamental principle of How the attack works, Exploitation and How to defend from those attacks.In this course you will learn about:What is BlockchainWhat are DAppsWhat is a smart contractLAB setup to pentest smart contractsMetamask and its usageInstallation of Hardhat Setup Remix IDEPractical on Functions in RemixPractical on View and Pure Functions in SolidityMappings in solidityDeploying a smart contractSecurity Vulnerabilities in solidity Practical Example of Integer Overflow and UnderflowHow to find issues using Ethernaut PlaygroundSelfdestruct in SolidityFallback FunctionsForce ChallengeReentrancy IssuesPrivate Variables in SolidityUsing Hardhat for testing smart contractsAn example PoC on the Parity Wallet HackHow to hunt on Web 3 bug bounty platforms like Immunefi & HackenproofHow to write a professional reportWith this course, you get 24/7 support, so if you have any questions you can post them in the Q & A section and we'll respond to you as soon as possible.Notes:This course is created for educational purposes only and all the websites I have performed attacks are ethically reported and fixed.Testing any website which doesn't have a Responsible Disclosure Policy is unethical and against the law, the author doesn't hold any responsibility.
