|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/web-application-hacking-and-penetration-testing/
课程评论：没有评论
课程名称：初学者的网页应用黑客与安全 课程概述：网站漏洞是指网站或网页应用代码中的弱点或配置错误，允许攻击者对网站及其托管服务器获得一定程度的控制。大多数漏洞通过自动化手段被利用，例如漏洞扫描器和僵尸网络。常见的网页应用漏洞通常源于不安全的代码开发实践或使用容易受攻击的软件，例子包括：SQL注入、跨站脚本攻击（XSS）、命令执行、文件注入、跨站请求伪造（CSRF）等。 Kali Linux 是一个专门针对网络安全的 Linux 发行版，属于开源产品，经过大量定制以用于渗透测试，帮助公司了解其漏洞，且由 Offensive Security 维护和资助。网页应用防火墙（WAF）用于保护网页应用免受各类应用层攻击，如跨站脚本（XSS）、SQL 注入和 Cookie 污染等攻击。这些应用攻击是导致数据泄露的主要原因，是通往重要数据的入口。 在本课程中，您将学习网页应用的道德黑客技术，包括使用一些 Kali Linux 工具。课程内容涵盖：网页渗透测试与道德黑客简介、渗透测试实验室环境的设计与搭建、网站漏洞与一般攻击的理解、保护网站免受攻击的方式以及安全编码与网页应用防火墙的使用。
A website vulnerability is a weakness or misconfiguration in a website or web application code that allows an attacker to gain some level of control of the site, and possibly the hosting server. Most vulnerabilities are exploited through automated means, such as vulnerability scanners and botnets. There are a lot of common web application vulnerabilities as a result of insecure code development practices or using vulnerable software, some examples are: SQL Injection, Cross Site Scripting (XSS), Command Execution, File Injection, Cross Site Request Forgery (CSRF), etc.Kali Linux is a Linux distribution that is specialized for cybersecurity. It is an open-source product that involves a lot of customization for penetration testing, which helps companies to understand their vulnerabilities. It is maintained and funded by Offensive Security.A web application firewall (WAF) protects web applications from a variety of application layer attacks such as cross-site scripting (XSS), SQL injection, and cookie poisoning, among others. Attacks to apps are the leading cause of breaches-they are the gateway to your valuable data.In this course, you will learn about web application ethical hacking techniques including using some Kali Linux tools:Introduction to web penetration testing and ethical hackingDesigning and building a lab environment for pen testingUnderstanding website vulnerabilities and general attacksUnderstanding how to protect your website against attacksSecure coding and web application firewalls
