Udemy.Website.Hacking.Penetration.Testing.And.Bug.Bounty.Hunting-LET

Section

0day

Group

LET

Size

5,01 GB

Files

12

Date

2022-03-09

NFO

Udemy.Website.Hacking.Penetration.Testing.And.Bug.Bounty.Hunting-LET

Title:   Website Hacking / Penetration Testing & Bug Bounty Hunting
URL:     https://www.udemy.com/course/learn-website-hacking-penetration-testing-from-scratch/
Length:  10:20:57
Subs:    de-DE, en-US, es-ES, fr-FR, id-ID, it-IT, pl-PL, pt-BR, ro-RO, th-TH

Notes:
------

Headline:
---------
Become a bug bounty hunter! Hack websites & web applications like black hat hackers and secure them like experts.

Contents:
---------
 - 1. Course Introduction => 02:13
1. Preparation - Creating a Penetration Testing Lab
 - 2. Lab Overview & Needed Software => 05:54
 - 3. Initial Preparation => 08:55
 - 4. Installing Kali Linux as a VM on Windows => 08:55
 - 5. Installing Kali Linux as a VM on Apple Mac OS => 09:38
 - 6. Installing Kali Linux as a VM on Apple M1 Computers => 09:08
 - 7. Installing Kali Linux as a VM on Linux => 10:46
 - 8. Installing Metasploitable As a Virtual Machine => 04:33
2. Preparation - Linux Basics
 - 9. Basic Overview Of Kali Linux => 05:10
 - 10. The Linux Terminal & Basic Linux Commands => 13:06
 - 11. Configuring Metasploitable & Lab Network Settings => 03:45
3. Website Basics
 - 12. What is a Website? => 04:13
 - 13. How To Hack a Website ? => 05:31
4. Information Gathering
 - 14. Gathering Information Using Whois Lookup => 04:41
 - 15. Discovering Technologies Used On The Website => 06:04
 - 16. Gathering Comprehensive DNS Information => 10:23
 - 17. Discovering Websites On The Same Server => 03:43
 - 18. Discovering Subdomains => 04:08
 - 19. Discovering Sensitive Files => 07:25
 - 20. Analysing Discovered Files => 04:17
 - 21. Maltego - Discovering Servers, Domains & Files => 07:42
 - 22. Maltego - Discovering Websites, Hosting Provider & Emails => 04:49
5. File Upload Vulnerabilities
 - 23. How To Discover & Exploit Basic File Upload Vulnerabilities to Hack Websites => 06:43
 - 24. GET & POST Requests => 05:20
 - 25. Intercepting Requests => 08:02
 - 26. Exploiting Advanced File Upload Vulnerabilities To Hack Websites => 05:09
 - 27. Exploiting More Advanced File Upload Vulnerabilities => 06:33
 - 28. [Security] Fixing File Upload Vulnerabilities => 06:21
6. Code Execution Vulnerabilities
 - 29. How To Discover & Exploit Basic Code Execution Vulnerabilities To Hack Websites => 07:25
 - 30. Exploiting Advanced Code Execution Vulnerabilities => 06:06
 - 31. [Security] - Fixing Code Execution Vulnerabilities => 05:47
7. Local File Inclusion Vulnerabilities (LFI)
 - 32. What are they? And How To Discover & Exploit Them => 05:49
 - 33. Gaining Shell Access From LFI Vulnerabilities - Method 1 => 06:46
 - 34. Gaining Shell Access From LFI Vulnerabilities - Method 2 => 10:37
8. Remote File Inclusion Vulnerabilities (RFI)
 - 35. Remote File Inclusion Vulnerabilities - Configuring PHP Settings => 03:46
 - 36. Remote File Inclusion Vulnerabilities - Discovery & Exploitation => 05:44
 - 37. Exploiting Advanced Remote File Inclusion Vulnerabilities To Hack Websites => 02:49
 - 38. [Security] Fixing File Inclusion Vulnerabilities => 05:54
9. SQL Injection Vulnerabilities
 - 39. What is SQL? => 05:48
 - 40. Dangers of SQL Injections => 02:53
10. SQL Injection Vulnerabilities - SQLi In Login Pages
 - 41. Discovering SQL Injections In POST => 07:56
 - 42. Bypassing Logins Using SQL Injection Vulnerability => 04:49
 - 43. Bypassing More Secure Logins Using SQL Injections => 06:24
 - 44. [Security] Preventing SQL Injections In Login Pages => 07:43
11. SQL injection Vulnerabilities - Extracting Data From The Database
 - 45. Discovering SQL Injections in GET => 07:01
 - 46. Reading Database Information => 05:26
 - 47. Finding Database Tables => 03:34
 - 48. Extracting Sensitive Data Such As Passwords => 04:29
12. SQL injection Vulnerabilities - Advanced Exploitation
 - 49. Discovering & Exploiting Blind SQL Injections => 05:53
 - 50. Discovering Complex SQL Injection Vulnerabilities => 07:21
 - 51. Exploiting an advanced SQL Injection Vulnerability to Extract Passwords => 04:47
 - 52. Bypassing Filters => 04:48
 - 53. Bypassing Security & Accessing All Records => 08:36
 - 54. [Security] Quick Fix To Prevent SQL Injections => 06:43
 - 55. Reading & Writing Files On The Server Using SQL Injections => 05:58
 - 56. Getting A Shell & Controlling The Target Server Using an SQL Injection => 08:26
 - 57. Discovering SQL Injections & Extracting Data Using SQLmap => 06:47
 - 58. Getting a Direct SQL Shell using SQLmap => 02:57
 - 59. [Security] - The Right Way To Prevent SQL Injection Vulnerabilites => 04:58
13. XSS Vulnerabilities
 - 60. Introduction - What is XSS or Cross Site Scripting? => 03:09
 - 61. Discovering Basic Reflected XSS => 03:46
 - 62. Discovering Advanced Reflected XSS => 04:34
 - 63. Discovering An Even More Advanced Reflected XSS => 07:04
 - 64. Discovering Stored XSS => 02:56
 - 65. Discovering Advanced Stored XSS => 03:36
14. XSS Vulnerabilities - Exploitation
 - 66. Installing Windows As a Virtual Machine => 06:09
 - 67. Hooking Victims To BeEF Using Reflected XSS => 05:41
 - 68. Hooking Victims To BeEF Using Stored XSS => 04:09
 - 69. Interacting With Hooked Targets => 03:56
 - 70. Running Basic Commands On Victims => 04:24
 - 71. Stealing Credentials/Passwords Using A Fake Login Prompt => 02:17
 - 72. Bonus - Installing Veil Framework => 03:56
 - 73. Bonus - Veil Overview & Payloads Basics => 07:20
 - 74. Bonus - Generating An Undetectable Backdoor Using Veil 3 => 10:19
 - 75. Bonus - Listening For Incoming Connections => 07:18
 - 76. Bonus - Using A Basic Delivery Method To Test The Backdoor & Hack Windows 10 => 07:12
 - 77. Gaining Full Control Over Windows Target => 03:39
 - 78. [Security] Fixing XSS Vulnerabilities => 07:17
15. Insecure Session Management
 - 79. Logging In As Admin Without a Password By Manipulating Cookies => 06:05
 - 80. Discovering Cross Site Request Forgery Vulnerabilities (CSRF) => 06:46
 - 81. Exploiting CSRF To Change Admin Password Using a HTML File => 07:00
 - 82. Exploiting CSRF Vulnerabilities To Change Admin Password Using Link => 05:40
 - 83. [Security] The Right Way To Prevent CSRF Vulnerabilities => 09:19
16. Brute Force & Dictionary Attacks
 - 84. Introduction to Brute Force & Dictionary Attacks? => 03:44
 - 85. Creating a Wordlist => 06:35
 - 86. Guessing Login Password Using a Wordlist Attack With Hydra => 13:32
17. Discovering Vulnerabilities Automatically Using Owasp ZAP
 - 87. Scanning Target Website For Vulnerabilities => 04:19
 - 88. Analysing Scan Results => 04:11
18. Post Exploitation
 - 89. Post Exploitation Introduction => 03:58
 - 90. Executing System Commands On Hacked Web Servers => 06:59
 - 91. Escalating Reverse Shell Access To Weevely Shell => 07:52
 - 92. Weevely Basics - Accessing Other Websites, Running Shell Commands ...etc => 06:31
 - 93. Bypassing Limited Privileges & Executing Shell Commands => 04:53
 - 94. Downloading Files From Target Webserver => 04:39
 - 95. Uploading Files To Target Webserver => 07:52
 - 96. Getting a Reverse Connection From Weevely => 07:46
 - 97. Accessing The Database => 08:53
 - 98. Conclusion => 05:20
 - 99. Writing a Pentest Report => 13:48
 - 100. 4 Ways to Secure Websites & Apps => 09:23
19. Bonus Section
 - 101. Bonus Lecture - Discounts => Article (not included)

Files