|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/web-app-penetration-testing-a-to-z/
课程评论：没有评论
课程名称：网络应用渗透测试与漏洞赏金猎人 概述：本课程适合绝对初学者到专家级别的学习者，以及刚从大学毕业希望在网络安全领域开启职业生涯的学生。课程内容涵盖网络应用渗透测试与漏洞赏金猎人的基础知识和实践技巧，包括以下主题： 1. 如何设置虚拟渗透测试实验室 2. 使用Burp工具监听HTTP流量 3. 了解Burp Suite工具的功能 4. 评估身份验证方案 5. 评估授权检查 6. 评估会话管理机制 7. 评估业务逻辑漏洞 课程还将涵盖多种存在已知网络安全漏洞的应用程序，以及网络应用渗透测试的具体案例。学员将学习如何测试浏览器缓存弱点、帐户枚举和可猜测帐户的风险、弱锁定机制、通过REST API进行的帐户供给流程、目录遍历、文件包含漏洞、特权提升、会话令牌强度、Cookie属性、暴露的会话变量以及跨站请求伪造等内容。 通过本课程，学员将掌握发现网络安全漏洞和进行网络应用渗透测试的技能，为未来的网络安全职业打下坚实的基础。
This course is for Absolute Beginners to Expert levels and Freshers out of college who want to start career with Web Security.Web App Penetration Testing & Bug Bounty Hunting1 - How To Setup A Virtual Penetration Testing Lab 2 - Listening for HTTP traffic, using Burp3 - Getting to Know the Burp Suite of Tools, Know the Burp Suite4 - Assessing Authentication Schemes5 - Assessing Authorization Checks6 - Assessing Session Management Mechanisms7 - Assessing Business LogicThis course is for Absolute Beginners to Expert levels. A variety of applications with known Web Security vulnerabilities and Web App Penetration Testing.Testing for browser cache weaknesses - Assessing Authentication Schemes Testing for account enumeration and guessable accounts -Assessing Authentication Schemes.Testing for weak lock-out mechanisms -Assessing Authentication Schemes Account provisioning process via REST API - Assessing Authentication Schemes Testing for directory traversal - Directory traversal Assessing Authorization Checks - Local File Include Assessing Authorization Checks - Remote File Inclusion Assessing Authorization Checks - Privilege escalationAssessing Authorization Checks - Insecure Direct Object Reference Testing session token strength using Sequencer - Assessing Session Management MechanismsTesting for cookie attributes - Assessing Session Management MechanismsTesting for exposed session variables - Assessing Session Management MechanismsTesting for Cross-Site Request Forgery - Assessing Session Management MechanismsAbove mentioned points will cover in this course which is help you to find Web Security Vulnerabilities and Web App Penetration testing.
