ETHICAL-PENTEST.AW1
Ethical Hacker’s Penetration Testing Guide
Start our penetration testing course today to train like an ethical hacker, enhance your career, and gain expertise to stop cyber threats.
- 15 Lecciones interactivas y 134 topics mapped to the official exam objectives
Intermediate A tu propio ritmo · 1 año de acceso
15Lecciones interactivas
134Topics
01 / Habilidades que obtendrás
What you will be able to do
Try Free →
No se requiere tarjeta de crédito
Enroll in our Ethical Hacking and Penetration Testing Course to uncover security risks, spot vulnerabilities, and stay ahead of cyber threats.
In this course, dive into real-world penetration testing for web apps, REST APIs, mobile apps, and wireless networks. Use tools like Nmap, Metasploit, Burp Suite, and Kali Linux. And learn how to exploit OWASP Top 10 vulnerabilities, including SQL injection, XSS, and SSRF, through hands-on labs, fuzzing techniques, and secure code reviews.
- Risk Assessment: Learn to identify and exploit OWASP Top 10 risks like SQL Injection, XSS, SSRF, and insecure file uploads.
- Penetration Testing Tools: Gain hands-on experience with Burp Suite, Nmap, Metasploit, SQLmap, OWASP ZAP, and Kali Linux.
- Web & Mobile Apps Security: Test web apps, REST APIs, thick clients, and Android apps for hidden security flaws.
- Automate Security Testing: Write Python scripts to automate vulnerability scanning and brute-force attacks.
- Network & Wireless Pentests: Perform host discovery, service scanning, and wireless network attacks.
- Security Controls: Learn advanced techniques to evade firewalls, bypass authentication, and exploit business logic flaws.
Course Highlights
-
15 Lecciones estructuradas Cobertura completa de los objetivos principales del curso
-
1 año de acceso completo Aprendizaje a tu propio ritmo, accesible en cualquier momento y en todos los dispositivos
02 / Lecciones y laboratorios
See exactly what you will learn and practice
Plan de estudios
15 Lecciones interactivas · 134 topics01 Introduction +
02 Overview of Web and Related Technologies and Understanding the Application 11 topics +
- Introduction
- Static vs dynamic web application, cookies
- Static web application: No cookies, no state/session
- Dynamic web application (web application with session)
- Web technologies: HTTP methods, response codes, and importance
- Introduction to HTTP2
- Representational state transfer (REST)
- Google Dorking/Google hacking
- Web application architecture and understanding the application (Recon)
- Basic Linux/Windows commands
- Conclusion
03 Web Penetration Testing – Through Code Review 17 topics +
- Introduction
- OWASP survey on effective detection methods for web vulnerabilities
- OWASP top 10 vulnerabilities
- Attack surface
- Code review: Things to look for while reviewing
- URL encoding and Same Origin Policy (SOP)
- URL encoding and escaping: The key is "In which order things are done"
- URL, encoding, and escaping: Things to review
- Same Origin Policy (SOP)
- Code viewing for Cross Site Scripting (XSS)
- SQL injection: The deadliest beast
- IDOR/BOLA/Auth bypass is the new pandemic
- Code review: Unrestricted file upload
- Code review: Scary mistakes
- Code review: Cryptography, hashing, and salt: Nothing is secure forever
- Code review: Unvalidated URL Redirects
- Conclusion
04 Web Penetration Testing – Injection Attacks 16 topics +
- Introduction
- Basic usages of Burp Proxy in pentesting
- Proxying REST API request using Postman and Burp Proxy
- Pentesting for XSS
- XSS in HTML context
- XSS in HTML attribute context
- XSS in URL context (works on PHP based application)
- XSS in JavaScript context
- XSS with headers and cookies: Application which processes header information
- XSS with certificate request or SSL certificate information
- DOM XSS
- Pentesting for SQL Injection
- Important usages of SQLMap for detecting SQL Injection
- SQLMapper/CO2 extension for Burp Suite
- Pentesting for Command Injection
- Conclusion
05 Fuzzing, Dynamic Scanning of REST API, and Web Application 15 topics +
- Introduction
- Fuzzing Web Application and REST API
- Fuzz Faster U Fool (Ffuf): A fast web fuzzer written in Go
- Fuzzing REST API by adding various HTTP Headers
- Fuzzing authenticated pages/REST API end points with cookies
- Various usage options of Ffuf
- Using Burp Suite Turbo Intruder (Fuzzer that supports HTTP2)
- Basic tricks in analyzing the output of fuzzing to conclude our findings
- Dynamic scanning of REST API and web application with OWASP ZAP
- Pentest REST API using OWASP ZAP
- Various setting and tricks while using OWASP ZAP
- Various Active scan settings for Input Vectors in OWAZP ZAP
- Other advanced settings of ZAP
- Why will automation without your brain not get any good result?
- Conclusion
06 Web Penetration Testing – Unvalidated Redirects/Forwards, SSRF 4 topics +
- Introduction
- Pen testing for unvalidated redirects or forwards
- Pentesting for Server-Side Request Forgery (SSRF)
- Conclusion
07 Pentesting for Authentication, Authorization Bypass, and Business Logic Flaws 7 topics +
- Introduction
- Authentication bypass
- Authorization issues
- Tricking authentication, authorization, and business logic
- Business logic bypass test scenarios
- Pen testing for HTTP 403 or Access Denied bypass
- Conclusion
08 Pentesting for Sensitive Data, Vulnerable Components, Security Monitoring 5 topics +
- Introduction
- Sensitive data in log, URL, DB, config, default credentials
- Discovering components with known vulnerabilities
- Implement security logging and monitoring: Splunk Alerts
- Conclusion
09 Exploiting File Upload Functionality and XXE Attack 12 topics +
- Introduction
- Pentesting for unrestricted file upload with REST API
- Unrestricted file upload: XSS: File name having XSS payload
- Unrestricted file upload: Remote Code Execution (RCE) attack
- Unrestricted file upload: XSS: File metadata having malicious payload
- Use null byte in file extension to bypass file extension checks
- Use double extension of file to bypass file extension checks
- Bypass Blacklisted extension check in file upload: Remote Code Execution (RCE) attack scenario
- Bypass php gd() checks for file upload
- XML and XXE attacks
- Protection against XXE attack
- Conclusion
10 Web Penetration Testing: Thick Client 11 topics +
- Introduction
- Thick Client application architecture
- Understanding the Thick Client application
- Perform reconnaissance of the Thick Client application
- Reverse engineering the Thick Client application
- Sensitive data in registry
- Sensitive data in config file
- Sensitive data in communication
- Username/password/keys in memory
- SQL Injection vulnerability
- Conclusion
11 Introduction to Network Pentesting 7 topics +
- Introduction
- Setting up of pentest lab
- Various phases of pentesting
- Host discovery and service detection using Nmap
- Exploiting the vulnerabilities using Metasploit and other tools
- Scanning for vulnerabilities using Nessus Essentials/Home
- Conclusion
12 Introduction to Wireless Pentesting 3 topics +
- Introduction
- Reconnaissance to identify wireless network
- Conclusion
13 Penetration Testing - Mobile App 15 topics +
- Introduction
- Android application security architecture
- OWASP Top 10 mobile risks
- Setting up lab for pentesting mobile App
- Reverse engineering or analyze APK file
- Embedded secrets in application code
- Sensitive data printed on log
- Sensitive data disclosure via SQLite DB
- Insecure data storage
- Extracting sensitive internal file through URL scheme hijacking
- Debug enabled
- SQL Injection vulnerability
- Static Analysis using mobile security framework
- Introducing dynamic analysis on MobSF
- Conclusion
14 Security Automation for Web Pentest 7 topics +
- Introduction
- Prerequisite
- Scenario 1: Brute Forcing Login Page
- Scenario 2: Simple SQL Injection Checker
- Scenario 3: Simple Privilege Escalation Checker
- Scenario 4: Indirect Object Reference (IDOR) Checker
- Conclusion
15 Setting Up Pentest Lab 4 topics +
- Host machine: Windows 11 laptop
- Download and install Python, pip, and other required modules
- Download and install XAMM and DVWA
- Setting up insecure thick client application, DVTA and other required tools
03 / Preguntas frecuentes
Preguntas antes de empezar
Do ethical hackers do penetration testing?+
Yes, ethical hackers often perform penetration testing (pentesting) as a core part of their job. You can learn to simulate cyberattacks on systems, networks, and applications in this ethical hacking and penetration testing course.
Its bite-sized lessons will help you identify vulnerabilities before malicious hackers exploit them. Most importantly, gain hands-on experience with tools like Metasploit, Nmap, Burp Suite, and Kali Linux to conduct these tests and provide remediation strategies.
What is an ethical hacker's salary?+
Salaries vary by experience, location, and certifications. Earning our ethical hacking course certification can boost your salary up to $122,783 per year.
What certifications help in ethical hacking?+
Top ethical hacking certifications include:
- Certified Ethical Hacker (CEH)
- Offensive Security Certified Professional (OSCP)
- CompTIA PenTest+
Explore our catalog to prepare for these certifications and focus primarily on skill development.
Keep going
You might also like
Become an Expert. Stop Hackers.
Learn to exploit, defend, and dominate cyber threats in this ethical hacking: penetration testing online course.
- 1 año de acceso completo
- Certificado de finalización
No se requiere tarjeta de crédito