webpen.tar.gz

shodan_api

Wireshark

chrome

Burp

frog

proxychains

encoder

setoolkitChrome

chromeShark

juiceshop

BurpChrome

This course is intended for people interested in information security—particularly in the penetration testing of various websites—to identify the security flaws present in the majority of newly developed websites and how to fix them. 

You will learn web penetration testing techniques using the Kali Linux operating system. You will be introduced to Python programming, web server technology, network management, open source intelligence, cross-site scripting, SQL injection, authentication and authorization in systems, cross-site request forgery, social engineering attacks, and concepts in information security management. 

Your knowledge of the various web application vulnerabilities and attack methods will be enhanced after taking this course. You will get hands-on experience with many tools used in online penetration testing in cyber security.

Web Application Penetration Testing

Which method of authentication involves the use of a passphrase or secret code to differentiate between an authentic and an  inauthentic user?

Which method of authentication involves the use of a passphrase or secret code to differentiate between an authentic and an inauthentic user?

Brute-forcing sequentially generated credentials

Credential stuffing with public data breaches as sources

Credential stuffing with the source being data from a small dump related to the web application

Which type of attack would best suit the scenario where an attacker has to log in to a web application with a limit on login attempts?

Which type of attack would best suit the scenario where an attacker has to log in to a web application with a limit on login attempts?

Credential stuffing with the source being public datasets

Credential stuffing with the source being a common password

**(Select all that apply.)** Which types of attack would quickly work in a scenario where an attacker has to log in to the admin panel of a web application? The attacker has confirmed through recon that the username that should be used is "admin." 

(Select all that apply.) Which types of attack would quickly work in a scenario where an attacker has to log in to the admin panel of a web application? The attacker has confirmed through recon that the username that should be used is “admin.”

Which access control method is used to restrict access to the functionality of the system and resources based on the state or users' interaction with it?

Which access control method is used to restrict access to the functionality of the system and resources based on the state or users’ interaction with it?

Which mitigation strategy applies the use of OTP codes to authenticate the different users in a system?

Which mitigation strategy applies the use of OTP codes to authenticate the different users in a system?

Take a short quiz on what you learned in this chapter.

Introduction to the Course

Introduction to Linux

Introduction to Python

Web and Server Technology

Network Management and Analysis

Open-Source Intelligence

Cross-Site Scripting

SQL Injection

Authentication and Authorization

Cross-Site Request Forgery

Social Engineering Attacks

Broader Security Concepts

Wrapping Up

Quiz Yourself on Authentication and Authorization