|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/web-application-penetration-testing-c/
课程评论：没有评论
课程名称：使用 Kali Linux 进行 Web 应用程序渗透测试 课程概览： 本课程分为五个部分。第一部分我们将学习如何创建自己的家庭虚拟实验室。强烈建议在测试实验室进行知识测试，而非生产系统，以避免可能对生产系统造成的损害。我们将学习如何安装 Kali Linux，这是一款在我们进行 Web 应用渗透测试时使用的操作系统，它包含超过300种渗透测试工具。Kali Linux 可以通过 ISO 文件或预构建的磁盘映像进行安装，我们将学习这两种安装方法。随后，我们将深入了解要使用的脆弱 Web 应用程序——“Damn Vulnerable Web Application”（DVWA）。顾名思义，这是一款存在多种安全漏洞的 Web 应用程序，您可以利用它来学习各种攻击及不同渗透测试工具（如 Burp Suite、SQLMAP 等）的正确使用。 在本教程的第二部分，我们将讨论对任何 Web 应用程序或网站进行渗透测试的各个阶段，学习渗透测试的定义，以及在渗透测试中使用的技术和工具。我将为您提供渗透测试的最佳实践，并介绍 NIST 等不同标准以及 MITRE Attack Framework 等框架，以指导您的渗透测试工作。 第三部分，我们将概述 Kali Linux 渗透测试工具，介绍这些工具的分类和在渗透测试过程中如何使用最常见的工具。 在本教程的第四部分，我们将讨论在测试任何 Web 应用程序时必须进行的各种攻击，包括文件包含攻击、SQL 注入攻击、命令执行攻击等。 最后，在本教程的第五部分，我们将覆盖渗透测试过程中最常用的工具。我们将介绍各种技术和方法论，以识别和利用 Web 应用程序中的漏洞。 希望您能获得有价值的见解和实用知识，帮助您保护 Web 应用程序，抵御潜在的攻击。如有任何评论，期待您的反馈。谢谢！
This course is divided into five parts, the first part we will learn about how to create your own home virtual lab. It's strongly recommended to test your knowledge on a testing lab and not production systems, to avoid any damage that may affect the production systems.We will learn how to install Kali Linux, which is the operating system we are going to use during our web application penetration testing tutorials, as Kali Linux is a tool kit that includes more than 300 penetration testing tools.Kali Linux can be installed using an ISO file, or using a pre-built disk image. We are going to learn both ways of installing Kali. After that, we will learn more about the vulnerable web application we are going to use, "Damn Vulnerable Web Application" or DVWA. This is a vulnerable web application as the name suggests that you can use to learn about various attacks and the correct usage of different penetration testing tools like Burp Suite, SQLMAP, etc.Next, in the second part of this tutorial, we will discuss the phases of any penetration testing process conducted on any web application or website. We will learn all about penetration testing and what are the techniques and tools that are used during penetration testing. I will give you the best practices in penetration testing and advise you about different standards such as NIST and frameworks such as MITRE Attack Framework, and that will guide you much during your penetration testing.In the third part, we are going to have an overview of Kali Linux Penetration Testing Tools. How these tools are categorized and how to use the most common tools in your penetration testing journey.In the fourth part of this tutorial, we are going to discuss various attacks that you must test in any web application you are testing, including file inclusion attacks, SQL injection attacks, Command execution attacks, etc.In the final part of this tutorial, we are going to cover the most common tools we use in our penetration testing journey as shown in the table on the right.That being said, we will cover various techniques and methodologies to identify and exploit vulnerabilities in web applications.I hope you will gain valuable insights and practical knowledge that will assist you in securing web applications and protecting them from potential attacks.Looking forward to hearing from you if you have any comments. Thanks.#informationsecurity #cybersecurityawareness #cybersecurity #vulnerability #vulnerabilitymanagement #penetrationtesting #Top_Security_Terms #Network_Security #DNS #Network_Types #Linux_Server #SOC #BlueTeam #SOC_OC
