Be a Web Application Penetration Tester from Scratch

Be a Web Application Penetration Tester from Scratch, available at $19.99, has an average rating of 4.1, with 57 lectures, 1 quizzes, based on 54 reviews, and has 689 subscribers.

You will learn about Perform a penetration test over web applications Every insights of pentesting as an Industry Standards Write a formal pentesting report Earn by hunting Bugs in Web applications Helpful in students pursuing Master or Ph. D Degree in Information Security This course is ideal for individuals who are Information Security Researchers or Web Developers or Start ups or Students or Security auditors or Bug hunter It is particularly useful for Information Security Researchers or Web Developers or Start ups or Students or Security auditors or Bug hunter.

Enroll now: Be a Web Application Penetration Tester from Scratch

Summary

Title: Be a Web Application Penetration Tester from Scratch

Price: $19.99

Average Rating: 4.1

Number of Lectures: 57

Number of Quizzes: 1

Number of Published Lectures: 57

Number of Published Quizzes: 1

Number of Curriculum Items: 58

Number of Published Curriculum Objects: 58

Original Price: $129.99

Quality Status: approved

Status: Live

What You Will Learn

Perform a penetration test over web applications
Every insights of pentesting as an Industry Standards
Write a formal pentesting report
Earn by hunting Bugs in Web applications
Helpful in students pursuing Master or Ph. D Degree in Information Security

Who Should Attend

Information Security Researchers
Web Developers
Start ups
Students
Security auditors
Bug hunter

Target Audiences

Information Security Researchers
Web Developers
Start ups
Students
Security auditors
Bug hunter

Do you know that web application pentesters are earning 100's of dollars by submitting bugs to various reputed websites. Now there is a legal way by which you can report bugs and vulnerability to websites and in return you can get reward money.

What is this course about?

This is an ideal course to learn penetration testing from scratch. This course requires no coding skills yet you will be able to perform and create great reports on pentesting for clients. Pentesting is second highest paid job with lots of empty space according to Forbes.

Everyone is learning to create, someone has to take the responsibility to secure that creation.

Penetration testing is a step by step procedure to test an application for various security flaws. These flaws can compromise a website at various levels like database leak, client information leak or may involve monetary leak too.

A lot of new pentester learn a few slings to hack the application but approaching client in a formal way, doing a procedural pentest and documenting a report is a different game. In this course you will learn about all types of vulnerabilities, exploitation of web application, impact of flaws and finally we will cover the steps to write a report.

Traditional companies rely on Firewalls and network security. Attack vectors based on web application will not trigger alarm for it. Specially the new application that are based on CMS like wordpress are getting hacked often. A whole lot ground is covered in this course.

Updates in this course.

You might notice a few small topics being missed out. Web security is a big monster, that is why we have decided to roll out the course and in the mean while we will be updating the course on monthly basis. There will be no charge for extra lecture added but course prize may increase at latter stage.

No coding experience, No Prior Knowledge; Just start your journey as WEB APPLICATION PENTESTER.

Course Curriculum

Chapter 1: The Ultimate world of Pentesting Jargons

Lecture 1: What is Pentesting and Web Pentesting.

Lecture 2: Common terminologies in Penetration Testing

Lecture 3: Box Based testing: Black Box, White Box and Grey Box

Lecture 4: Fundamentals of Attacking for Vulnerability Assessment.

Lecture 5: Tools of Trade for Pentester

Lecture 6: Steps to conduct Penetration testing

Lecture 7: OWASP top 10 vulnerability and guidelines

Lecture 8: What we did so far: Summary

Chapter 2: Set up of the Home Lab

Lecture 1: Installation of Attacker linux machine

Lecture 2: Installation of Windows based OS in vm

Lecture 3: Quick tour to pentesting linux

Lecture 4: What we did so far – summary

Chapter 3: Lets learn reconnaissance

Lecture 1: What is reconnaissance

Lecture 2: initial research about target application

Lecture 3: Shodan and advanced google research about target

Lecture 4: offline mirror of target site for local testing

Lecture 5: ICMP – DNS testing and DNS zone transfer

Lecture 6: Nmap and Zenmap tools

Lecture 7: Do not rely completely on tools

Lecture 8: What we did so far- Summary

Chapter 4: Step by Step pentesting guide by OWASP

Lecture 1: What is next to come

Lecture 2: Search Engines, FingerPrint and Metafiles

Lecture 3: Services, source code review and entry points

Lecture 4: Crawlers, Framework detection and Architecture

Lecture 5: Web server configuration and file extension

Lecture 6: web server backups, admin page and http request

Lecture 7: Identity management and role defination in an application

Lecture 8: Test accounts and weak account policy

Lecture 9: Testing for credential transport over Encrypted channel

Lecture 10: lock outs, authentication bypass and defaults

Lecture 11: password cache and password policy

Lecture 12: Security questions and re authentication channel

Lecture 13: Remote and local file inclusion and Directory traversal

Lecture 14: insecure direct object reference and priviledge escalation

Lecture 15: Session management and cookie analysis

Lecture 16: Session fixation and session exposed vulnerabilities

Lecture 17: Cross site request forgery CSRF vulnerability

Lecture 18: Log out and session timeout test

Lecture 19: Input validation for injection and XSS

Lecture 20: What we did so far – Summary

Chapter 5: Automation tools for pentesting

Lecture 1: Webshag and Vega for web app pentesting

Lecture 2: OWASP Zap for automation of testing

Lecture 3: Websploit, wafwoof and W3af tools

Lecture 4: No Brute Force

Lecture 5: Social Engineering Toolkit attacks

Chapter 6: Documenting the Pentesting report

Lecture 1: Problems and markups for security report

Lecture 2: Steps to write Pentesting Documentation report

Lecture 3: Pentesting Report Format

Chapter 7: Web app pentesting project 1

Lecture 1: Setting up project for testing

Lecture 2: brute force with burp suite

Lecture 3: remote code execution vulnerability

Lecture 4: cross site request forgery attack

Lecture 5: file inclusion vulnerability

Lecture 6: SQL injection basics

Lecture 7: Shell uploading and defacing

Chapter 8: Web app pentesting project 2

Lecture 1: Installation of Webgoat as test environment

Chapter 9: Summary

Lecture 1: Summary

Instructors

Igneus Technologies
Best Comprehensive Courses

Rating Distribution

1 stars: 5 votes
2 stars: 4 votes
3 stars: 11 votes
4 stars: 17 votes
5 stars: 17 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!

Menu