Gain insights into web app vulnerabilities and attack methods, delve into penetration testing with Kali Linux, and explore tools for enhancing information security using Python, web tech, and network management.

webpen.tar.gz

shodan_api

Wireshark

chrome

Burp

frog

proxychains

encoder

setoolkitChrome

chromeShark

juiceshop

BurpChrome

This course is intended for people interested in information security—particularly in the penetration testing of various websites—to identify the security flaws present in the majority of newly developed websites and how to fix them. 

You will learn web penetration testing techniques using the Kali Linux operating system. You will be introduced to Python programming, web server technology, network management, open source intelligence, cross-site scripting, SQL injection, authentication and authorization in systems, cross-site request forgery, social engineering attacks, and concepts in information security management. 

Your knowledge of the various web application vulnerabilities and attack methods will be enhanced after taking this course. You will get hands-on experience with many tools used in online penetration testing in cyber security.

Web Application Penetration Testing

**(Select all that apply.)** What information is displayed when a user enters the `ifconfig` command in the Linux terminal system? 


(Select all that apply.) What information is displayed when a user enters the <code>ifconfig</code> command in the Linux terminal system?

This column gives the numbering sequence of the different captured traffic.

This column contains information about the sizes of network packets and the associated protocol data.

This column refers to the protocols through which the packets are communicating. 

This column represents protocols as they have been captured.

What is purpose of the "Protocol" column on the default view of Wireshark?

What is purpose of the “Protocol” column on the default view of Wireshark?

`ifconfig down`

`ifconfig eth0 hw ether 00:78:56:8d:43:6g`

`ifconfig up`

`ifconfig up`

`ifconfig eth0 hw ether 00:78:56:8d:43:6g`

`ifconfig down`


`ifconfig eth0 up`

`ifconfig eth0 hw ether 00:78:56:8d:43:6g`

`ifconfig eth0 down`


`ifconfig eth0 down`

`ifconfig hw 00:78:56:8d:43:6g`

`ifconfig eth0 up`


Which combination of commands is used to change the MAC address of `9e:bd:7c:45:17:2e` to `00:78:56:8d:43:6g`?

Which combination of commands is used to change the MAC address of <code>9e:bd:7c:45:17:2e</code> to <code>00:78:56:8d:43:6g</code>?

Which command is used to filter TCP traffic with the SYN signal in Wireshark?

Which command is used to filter TCP traffic with the SYN signal in Wireshark?

`ip.src == <your IP address> || ip.dist == <your IP address>`

`ip == <your IP address> || ip == <your IP address>`

`http ip.src == <your IP address> || ip.dist == <your IP address>`

`http && ip.src == <your IP address> || ip.dist == <your IP address>`

A web pentester wants to filter the HTTP traffic that is within a given server. Which option could best be used in the filtration process?

A web pentester wants to filter the HTTP traffic that is within a given server. Which option could best be used in the filtration process?

A pentester has been tasked to examine the DNS of example.com. Which command would best suit the examination process?

A pentester has been tasked to examine the DNS of <a href="http://example.com">example.com</a>. Which command would best suit the examination process?

A web administrator wants to modify the DNS server address of a Linux system. Which one of the following files can be used to perform the DNS modification?

A web administrator wants to modify the DNS server address of a Linux system. Which one of the following files can be used to perform the DNS modification?

Take a short quiz on what you learned in this chapter.

Introduction to the Course

Introduction to Linux

Introduction to Python

Web and Server Technology

Network Management and Analysis

Open-Source Intelligence

Cross-Site Scripting

SQL Injection

Authentication and Authorization

Cross-Site Request Forgery

Social Engineering Attacks

Broader Security Concepts

Wrapping Up

Quiz Yourself on Network Management and Analysis