|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/web-app-penetration-testing/
课程评论：没有评论
课程名称：网络应用渗透测试 课程概述： 本课程旨在为绝对初学者到专家级别的学习者提供网络安全的知识，特别适合刚毕业的学生有意在网络安全领域发展职业生涯。本课程将介绍带有已知网络安全漏洞的多种应用程序及网络应用渗透测试的相关知识。 课程内容包括： - 建立渗透测试实验室 - 使用Burp Suite工具进行HTTP流量监听 - 掌握Burp Suite的各项工具 - 评估身份验证方案 - 评估授权检查 - 评估会话管理机制 - 评估业务逻辑 - 评估输入验证检查 - 测试账户枚举和可猜测账户 - 弱锁定机制的测试 - 绕过身份验证方案的测试 - 浏览器缓存弱点的测试 - 通过REST API测试账户配置过程 - 目录遍历、局部文件包含（LFI）、远程文件包含（RFI）的测试 - 权限提升、IDOR的测试 - 使用Sequencer测试会话令牌强度 - 测试Cookie属性和会话固定 - 暴露的会话变量 - 跨站请求伪造（CSRF）的测试 - 业务逻辑数据验证测试 - 无限制文件上传及绕过弱验证的测试 - 执行过程时延攻击 - 绕过工作流程的测试 - 上传恶意文件（多格式文件） - 反射型跨站脚本（XSS）与存储型跨站脚本的测试 - 测试HTTP动词篡改和HTTP参数污染 - 测试SQL注入与命令注入 本课程将帮助您发现网络安全漏洞，并掌握网络应用渗透测试的技术。
This course is for Absolute Beginners to Expert levels and Freshers out of College who want to start career with Web Security.This course is for Absolute Beginners to Expert levels. A variety of applications with known Web Security vulnerabilities and Web App Penetration Testing.Setting up a web app pentesting labBurp SuiteTesting for account enumeration and guessable accountsWeak lock-out mechanismsTesting for bypassing authentication schemes Browser cache weaknessesTesting the account provisioning process via REST APITesting for directory traversal Local File Include (LFI)Remote File Include (RFI)Testing for privilege escalation IDORTesting session token strength using SequencerTesting for cookie attributes Testing for session fixationExposed session variablesCross-Site Request ForgeryTesting business logic data validationUnrestricted file upload - bypassing weak validationPerforming process-timing attacksTesting for the circumvention of workflowsUploading malicious files - polyglotsReflected cross-site scriptingStored cross-site scriptingTesting for HTTP verb tampering HTTP Parameter PollutionTesting for SQL injectionCommand injectionWeb App Penetration Testing - Home LAB.1 - How To Setup A Virtual Penetration Testing Lab2 - Listening for HTTP traffic, using Burp3 - Getting to Know the Burp Suite of Tools, Know the Burp Suite4 - Assessing Authentication Schemes5 - Assessing Authorization Checks6 - Assessing Session Management Mechanisms7 - Assessing Business Logic8 - Evaluating Input Validation ChecksAbove mentioned points will cover in this course which is help you to find Web Security Vulnerabilities and Web App Penetration testing
