|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/website-hacking-in-practice/
课程评论:没有评论
Coursera 课程《Website Hacking in Practice: Hands-on Course 101》是一门面向初学者和专业人士的道德黑客和网络安全培训课程。该课程旨在教授网站与 Web 应用的黑客技术,重点讲解 OWASP Top 10 列表中的关键攻击,并包含额外 10 种常见漏洞。 课程内容涵盖: * **环境配置与准备**:指导学员如何搭建和配置练习环境。 * **数据隐藏与信息泄露**:包括深层数据隐藏、路径和信息披露技术。 * **密码攻击**:讲解暴力破解、字典攻击和账户锁定攻击。 * **Web 参数攻击**:教授参数篡改、路径遍历和 Unicode 编码利用。 * **代码注入**:详细演示 PHP 注入、直接静态代码注入。 * **SQL 注入**:提供 SQL 注入的步骤化实践演示。 * **跨站攻击 (XSS)**:讲解 XSS 的原理和拦截用户会话的方法,以及 XST(Cross Site Tracing)。 * **跨站请求伪造 (XSRF)**:演示如何通过 XSRF 强制用户执行操作。 * **会话管理攻击**:教授会话劫持和会话固定技术。 * **社会工程学**:介绍网络钓鱼(Phishing)及其防护技巧。 * **安全测试**:讲解自动化安全测试工具,并区分白盒、黑盒和灰盒测试。 课程特色包括: * **动手实践**:提供 21 种黑客技术的实际操作案例。 * **全面资料**:提供所有课程讲义的 PDF 版本、视频教程,并包含带截图的视频文本记录。 * **代码资源**:提供课程中展示的所有源代码和示例。 * **安全防护**:每种漏洞的讲解都附带相应的网站安全防护指导。 * **零基础友好**:仅需基本的计算机知识和 Windows 系统环境。 * **道德使用**:强调所有技术仅用于道德目的和个人测试环境。 该课程适合白帽黑客、Web 开发者、系统管理员和 IT 安全顾问。学员可在 30 天内获得全额退款保证。
LAST UPDATED: 11/2024Ethical Hacking Course: Website Hacking in Practice Training course - finally published!Welcome to Hacking School: Website Hacking in Practice Training! Before we begin - the practical use of the training you are going to see has been proven by vast group of people - beginners and computer geeks as well. People who make their first steps in computer / network security and professionals: network administrators, programmers, black- and white hat hackers. Please, read carefully what we'd like to share with you. The course covers all important hacking techniques used by hackers and system administrators. About the Ethical Hacking Training course (what you can expect): It is a step by step training on Website and Web-application ethical hacking and security.It covers almost all of the Top 10 Most Critical Web Application Attacks presented yearly by OWASP organization (Open Web Application Security Project) + 10 common techniques / vulnerabilities more.It can be treated as a valuable source of knowledge for any white hat hacker, web developer, system administrator or IT security consultant.You will learn how to hack using 21 interesting techniques and see how each of them can be used in a practical real-life example.You will get access to all the lectures in PDF format and live Ethical Hacking Video Training sessions you can watch on-line.Every lecture also contains a video session transcript with screen shots - you can print it and use it during your training.Finally you will be provided with all the source codes and examples shown in the course. You can simply download the zip package from our server. WHAT YOU WILL LEARN in this Ethical Hacking Training: Module 01. Introduction and environment configuration - you will learn how to configure and prepare your system for the further training. All you need is a Windows system.Module 02. Deep data hiding.Module 03. Brute-force and dictionary attacks - you will get to know how an attacker could perform a brute-force or a dictionar attack on your website or web application containing a password protected data. Module 04. Account lockout attack.Module 05. Web parameter tampering - you will learn how to tamper hidden data used by websites. You will use the presented technique in a real-life example. Very important lesson.Module 06. Path and information disclosure.Module 07. Forced browsing - you will see how an attacker could "sniff" a sensitive data from a website using a forced browsing.Module 08. Path traversal - you will learn a path traversal method and use it in practice in your training environment.Module 09. Unicode encoding - encoding related vulnerabilities.Module 10. Parameter delimiter - you will learn how to take advantage of input filtering bugs. After this lesson you will be able to create an admin account - of course without having the administrator privileges.Module 11. PHP injection - you will be demonstrated a PHP code injection practical attack. Very important lesson. You will see how a malicious data can be injected into a website, e.g. using a crafted image or text string.Module 12. Direct static code injection - you will learn what a ststic code injection is and how it could be used by an attacker.Module 13. SQL injection - one of the TOP3 techniques used by attackers nowadays. Step by step practical demonstration. You can hack the training website yourself (without harming anybody).Module 14. XSS - Cross Site Scripting attack - you will see for yourself why XSS is considered the most popular hackers' target. By the end on this lesson you will intercept a user session.Module 14B. XST - Cross Site Tracing attack.Module 15. XSRF - Cross Site Request Forgery attack - you will learn how an attacker can force an unaware user to reset a password.Module 16. Spying on data with a browser - no additional comment needed.Module 17. Session hijacking - lesson on session hijacking and consequences.Module 18. Session fixation.Module 19. Phishing - one of the most popular attacks. You will learn some tips to protect against it.Module 20. Automated security testing - you will be taught using automated security testing tools and learn what white, black and grey box testing is. Useful knowledge for web developers and IT security consultants. IN EACH MODULE YOU WILL ALSO SEE HOW YOU CAN PROTECT YOUR WEBSITE OR WEB APPLICATION AGAINST EVERY VULNERABILITY DESCRIBED IN THE COURSE. MODULES ARE DIVIDED INTO: 1) THEORETICAL INTRODUCTION, 2) PRACTICAL ATTACK EXAMPLE, 3) SECURITY GUIDANCE. WHAT YOU NEED TO KNOW BEFORE YOU BEGIN: This ethical hacking course is intended to help you regardless of your current knowledge and skills. All you need is a basic computer knowledge and a Windows system.We will show you how to prepare your training environment. In this environment you can experiment freely, without doing harm to anybody.All the modules were recorded in Windows 7 (from the attacker / victim point of view) but it doesn't mean that the presented techniques apply only to Windows. Most of them are OS independent.You will download the ZIP package with all the source codes and examples from our server before you begin to avoid unnecessary code retyping.Every module (lesson) contains the attack related part, as well as a guidance to protect your own website, web application or web server. What you will find inside can also be used by beginners - thanks to live Video Training attached to the course. Almost every module covered inside has been presented by a professional web developer. Please be advised that all the techniques presented in "Website Hacking in Practice" course can only be used ethically and in your own testing / researching environment. Note that you will get all the required tools and information to prepare your own training system. Please see the Legal information in the 1st section for further legal reference. We guarantee your 100% satisfaction or you will get your money back. You have 30 days to decide if this course is for you. You will get access to the whole system. If for any reason you're not satisfied with your training, we will give you full refund. No questions asked. We wish you the best,The Hacking School Team