|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/web-application-security-testing-with-google-hacking/
课程评论：没有评论
课程名称：使用谷歌黑客进行网络应用安全测试 课程概述：网络应用中的敏感数据可能会被谷歌索引，从而公开暴露给互联网用户。在本课程中，您将学习到不同类型的敏感数据如何被谷歌索引。此外，您还将掌握一种被称为谷歌黑客的技术，并了解专业的渗透测试人员和道德黑客如何利用谷歌黑客来发现网络应用中的安全漏洞。 课程内容包括： 1. 使用谷歌黑客查找目录列表和SQL语法错误。 2. 通过谷歌黑客找到公开暴露的备份文件和内部服务器错误。 3. 使用谷歌黑客查找URL中的敏感数据以及不安全的HTTP网页。 4. 解释谷歌黑客数据库及其应用。 5. 讨论微软Yammer社交网络中的一个严重漏洞，这一漏洞允许攻击者通过谷歌黑客获得未经授权的用户账户访问权限。 6. 教授如何防止谷歌索引敏感数据。 本课程将侧重于演示和现实场景，帮助您在自己的渗透测试项目中应用所学知识。期待您加入课程！
Sensitive data from web applications can be indexed by Google and then it becomes publicly exposed to everyone on the Internet. In this course, you'll learn about different types of sensitive data that can be indexed by Google. What's more - you'll learn about the technique known as Google Hacking and you'll see how Google Hacking can be used by ethical hackers and professional penetration testers for finding security weaknesses in web applications.First, I'll present how you can use Google Hacking to find directory listings and SQL syntax errors. After that, I'll demonstrate how you can find publicly exposed backup files and internal server errors by means of Google Hacking. Next, I'll show you how you can use Google Hacking to find sensitive data in URLs and insecure HTTP web pages. Then, I'll explain to you what Google Hacking Database is and I'll tell you about a critical vulnerability in Microsoft Yammer Social Network that allowed the attacker to gain unauthorized access to users' accounts by means of Google Hacking. Finally, I'll tell you how to prevent Google indexing from happening.What you'll see primarily in this course are demos and real-world scenarios, because I want you to make the most of this course and apply this knowledge in your own penetration testing projects. I hope this sounds good to you and I can't wait to see you in the class.
