Skip to content

Search...

Services
- Cyber Security
- Security Training
Products
Blog
Events
About
Contact
Account
- My Account
- My Courses

Search...

About
Blog
Cart
Checkout
Contact
Cybersecurity Solutions for a Secure Future
My Account
My Profile
Order Completed
Privacy Policy
Products
Refund Policy
Register
Security Consulting
Security Training
Terms of Service
Tickets Checkout

Introduction

Course & topics

Course Home

Introduction

Course Overview and Objectives

Building the Labs

Building the Labs – Concepts

Building a Lab – Virtual Box

Building a Lab – Kali Linux

Building a Lab – Metasploitable

Building a Lab – Windows

Shaping your skills and Tools

Kali Linux Overview

Linux Command Line Overview

Lab Network and Metasploitable Settings

Getting Started on Web Hacking

Web Hacking Intro

information gathering

Information Gathering

Discovery Tools

DNS Reconnaissance

Websites Hosted on the Same Server

Files Directories

Analyzing Discovered Files

Maltego (Part 1 of 2)

Maltego (Part 2 of 2)

File Upload Vulnerabilities

Introduction to File Upload Vulnerability

Using Burp as Proxy

Exploiting Advanced File Upload Vulnerability

Exploiting More Advanced File Upload Vulnerability

Security Tips for File Upload Vulnerabilities

Code Execution Vulnerabilities

Code Execution Vulnerability

Advanced Code Execution Vulnerability

Security Tips for Code Execution Vulnerabilities

Local File Inclusion Vulnerabilities

Local File Inclusion Vulnerability

Getting Shell from LFI (Part 1 of 2)

Getting Shell from LFI (Part 2 of 2)

Remote File Inclusion Vulnerability

Remote File Inclusion Vulnerability

Discovering and Exploiting RFI Vulnerabilities

Exploiting Advanced RFI Vulnerabilities

Security Tips for RFI Vulnerabilities

SQL Injection

SQL Injection (Part 1 of 2)

SQL Injection (Part 2 of 2)

SQLi on HTTPS POST Requests

Bypassing Logins Using SQLi

Bypassing Logins Using SQLi

Bypassing Logins Using SQLi (Advanced)

Security Tips – Bypassing Logins Using SQLi

Extracting Database Information using SQLi

SQLi on HTTPS GET Requests

Reading Database Information

Finding Database Tables

Extracting Sensitive Information from Databases

Advanced SQL Injection Exploitation

Exploiting Blind SQL Injections

Discovering Complex SQL Injections

Extracting Sensitive Information Using Advanced SQLi Techniques

Bypassing Security and Accessing All Records

Bypassing Filters

Security Tips for Preventing SQLi

Reading and Writing Files from and onto a Server Using SQLi

Getting Reverse Shell and Full Control of a Web Server

Getting a Direct SQL Shell Using SQLmap

Security Tips for SQL Injection

Cross Site Scripting

Introduction to XSS

Discovering Advanced Reflected XSS

More Advanced Reflected XSS

Discovering Advanced Stored XSS

The Browser Exploitation Framework Project (BEEF)

Hooking Victims to BeEF Using Stored XSS

BeEF Interacting with Hooked Victims

BeEF Running Basic Commands on Victims

BeEF Stealing Credentials From a Fake Login Prompt

Installing Veil

Veil Overview and Basic Payloads

Generating an Undetectable Backdoor Using Veils 3

Listening for Incoming Connections

Basic Backdoor Delivery Method

BeEF – Gaining Full Control Over a Windows Target

Preventing XSS Vulnerabilities

Cross Site Request Forgery

Manipulating Cookies To Gain Access

Discovering CSRF Vulnerabilities

Exploiting CSRF Vulnerability (Part 1 of 2)

Exploiting CSRF Vulnerability (Part 2 of 2)

Security Tips for CSRF Vulnerability

Cracking Online Web Form Passwords

Brute Force and Dictionary Attacks

Creating a Wordlist

Using Hydra (Part 1 of 2)

Using Hydra (Part 2 of 2)

WEB Vulnerability Scanners

Using OWASP ZAP

Analyzing Scan Results With OWASP ZAP

Using w3af Console

Course Conclusion

Congratulations for Completing the Course!

Return to Practical Web Application Penetration Testing

Practical Web Application Penetration Testing Introduction

Shopping Cart

Scroll to Top