Register to Ethical Hacking Course for complete Vdo tutorial, hacking challenges and project.

Table of Content

Introduction to Information Security and Basics of Computer Networking

• Introduction to Information Security

• Hacking Methodologies and Types of Security Testing

• Module Test

Information Gathering and Basics of Web Development:

• Digital Footprints and Information Gathering
• Advanced Information Gathering about People and Websites
• Google Dorking- Hacking using Google
• Introduction to Web Architecture and Understanding Common
• Security Misconceptions
• HTML Basics
• HTML and Introduction to Javascript
• Introduction to PHP and Setting up XAMPP
• Putting Brains into Beauty- Working with PHP
• Handling User Input and Building Basic Applications using PHP
• Module Test

Introduction to Web VAPT, OWASP and SQL Injections

• Introduction to VAPT and OWASP
• Basics of Databases and SQL
• Authentication Bypass using SQL Injection
• GET based SQL Injection- Part 1
• GET based SQL Injection- Part 2
• POST based SQL Injection- Part 1
• POST based SQL Injection- Part 2
• Advanced SQL Injections
• Automating SQL Injections- SQL Map
• Module Test

Advanced Web Application Attacks

• Client-Side Attacks
• Bypassing Client-Side Filters using Burp
• Suite
• IDOR and Rate-limiting issues
• Arbitrary File Upload Vulnerabilities
• Module Test

Client Side Attacks

• Understanding Important Response Headers, DOM,and Event Listeners
• Fundamentals of Cross-Site Scripting (XSS)
• Understanding Forced Browsing and Session-Cookie Flaws
• Cross-Site Request Forgery (CSRF) and Open Redirections
• Brute Force Attacks using Burp Suite
• Personally Identifiable Information (PII) Leakage and Sensitive Information Disclosure
• Module Test

Identifying Security Misconfigurations and Exploiting Outdated Web Applications

• Common Security Misconfigurations
• Default/Weak Password Vulnerabilities
• Fingerprinting Components with Known Vulnerabilities
• Scanning for Bugs in Wordpress and Drupal
• Using Public Exploits and Looking at Live Case Studies
• Module Test

Automating VAPT and Secure Code Development

• Information Gathering for Endpoints
• Application Assessment using Nmap
• Automating VAPT with Nikto and Burp Suite Pro
• Concepts of Code Security and Patching
• Module Test

Documenting and Reporting Vulnerabilities

• Documenting Stages of Vulnerabilities using Tools
• VAPT Reports: Developer Report v/s Higher Management Report
• Concept of Code Security
• Parts of a VAPT Report
• Common Good Practices and Bad Practices
• Module Test