|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/web-application-penetration-testing/
课程评论：没有评论
课程名称：网络应用渗透测试 课程概述：本课程适合初学者，并旨在帮助希望进入应用安全领域的学员。若您不知从何开始应用安全的旅程，或者对如何开展漏洞赏金项目充满好奇，那么这门课程将是一个很好的起点。本实用的网络应用渗透测试课程涵盖了多种常见的网络应用攻击。掌握基础知识后，您可以自主提升自己的技能。该入门级网络安全课程还提供了专为本课程开发的Java自定义网络应用程序。此外，课程涉及一些可在公开易受攻击的网络应用中进行的挑战。课程适时提供必要的背景信息，帮助理解相关概念。 课程涵盖的主题包括： - 网络应用架构 - HTTP请求和响应 - SQL注入 - 身份验证绕过 - 手动利用错误基础的SQL注入 - 使用SQLMap进行SQL注入攻击 - 跨站脚本攻击 - 反射型、存储型和DOM型 - 跨站请求伪造 - 破坏性加密 - 访问控制问题 - 任意文件上传 - XPATH注入 - XML外部实体（XXE）注入 - Java反序列化 - 通过安全配置错误进行命令执行 - 通过过时软件进行命令执行 在课程中，您将学习到与大多数讨论的漏洞相关的以下内容： - 如何识别一个漏洞 - 如何利用已识别的漏洞 - 如何防止所讨论的漏洞 注意：本课程正在更新中，新的内容将在所有宣传模块覆盖之前持续上传。
Are you a beginner and looking to break into the AppSec field? Don't know where to start your Application Security journey? Curious to know what it takes to get started with Bug Bounties? Then, this course is a great start for you. This practical web application penetration testing course is suitable for beginners and it covers a wide range of common web application attacks. Once you get the foundations right, you can build your skills on your own from there. This entry level web security course also provides a custom web application developed in Java specifically for this course. In addition to it, the course also covers some challenges in a publicly available vulnerable web application. The course provides necessary background details to the concepts wherever necessary. Following are some of the topics covered in this course:Web Application ArchitectureHTTP Requests and ResponsesSQL Injection - Authentication BypassManually Exploiting Error Based SQL InjectionSQLMap for exploiting SQL InjectionCross Site Scripting - Reflected, Stored and DOM BasedCross Site Request ForgeryBroken CryptographyAccess Control IssuesArbitrary File UploadsXPATH InjectionXML External Entity (XXE) InjectionJava DeserializationCommand Execution via Security MisconfigurationsCommand Execution via outdate softwareYou will learn the following for most vulnerabilities discussed in the course.Identifying a vulnerabilityHow to exploit an identified vulnerabilityHow to prevent the discussed vulnerabilityNOTE: This is course is being updated and new content will be uploaded until all the advertised modules are covered.
