Gain insights into web app vulnerabilities and attack methods, delve into penetration testing with Kali Linux, and explore tools for enhancing information security using Python, web tech, and network management.

webpen.tar.gz

shodan_api

Wireshark

chrome

Burp

frog

proxychains

encoder

setoolkitChrome

chromeShark

juiceshop

BurpChrome

This course is intended for people interested in information security—particularly in the penetration testing of various websites—to identify the security flaws present in the majority of newly developed websites and how to fix them. 

You will learn web penetration testing techniques using the Kali Linux operating system. You will be introduced to Python programming, web server technology, network management, open source intelligence, cross-site scripting, SQL injection, authentication and authorization in systems, cross-site request forgery, social engineering attacks, and concepts in information security management. 

Your knowledge of the various web application vulnerabilities and attack methods will be enhanced after taking this course. You will get hands-on experience with many tools used in online penetration testing in cyber security.

Web Application Penetration Testing

# Introduction to networking

Understanding networks is crucial for aspiring hackers, pentesters, and web administrators. Working over a network is a requirement in many standard penetration tests. As such, this lesson (and the following lessons) will cover a number of tools that are used in analyzing and managing networks during the pentesting process.

# Analyzing networks with `ifconfig`

The `ifconfig` tool is used for examining and interacting with active network interfaces. Pentesters query active networks by entering `ifconfig` in the Linux terminal and surveying the information presented. Let's test out the command below and see what information it has for us:

From the terminal above, the `ifconfig` command displays the different interfaces that are connected to the system. The Linux system does the classification of interfaces by using the index. Since our Linux environment only has one working Ethernet interface, we see it as  `eth0`. The `eth0` interface displays the machine's IP address in the internal network alongside its subnet mask (which means other machines in the internal network will have similar IP addresses). This interface also sets the expectation that the system is connected to the internet through a physical cable unless we're using a virtual machine.

Next up is the loopback interface (`lo`). This is also called the localhost. It can be visualized as a virtual network device that's reachable by the computer and used to test services locally.

Not shown above is the wireless LAN, known as `wlan0`. If our system is connected to the internet via Wi-Fi, then we'll see the `wlan0` interface.

Learn how to use simple tools to gain information about networks and check their status.

Introduction to the Course

Introduction to Linux

Introduction to Python

Web and Server Technology

Network Management and Analysis

Open-Source Intelligence

Cross-Site Scripting

SQL Injection

Authentication and Authorization

Cross-Site Request Forgery

Social Engineering Attacks

Broader Security Concepts

Wrapping Up

Network Analysis Using ifconfig and iwconfig

Introduction to networking

Analyzing networks with `ifconfig`

Network Analysis Using ifconfig and iwconfig

Introduction to networking

Analyzing networks with ifconfig

Analyzing networks with `ifconfig`