Gain insights into web app vulnerabilities and attack methods, delve into penetration testing with Kali Linux, and explore tools for enhancing information security using Python, web tech, and network management.

webpen.tar.gz

shodan_api

Wireshark

chrome

Burp

frog

proxychains

encoder

setoolkitChrome

chromeShark

juiceshop

BurpChrome

This course is intended for people interested in information security—particularly in the penetration testing of various websites—to identify the security flaws present in the majority of newly developed websites and how to fix them. 

You will learn web penetration testing techniques using the Kali Linux operating system. You will be introduced to Python programming, web server technology, network management, open source intelligence, cross-site scripting, SQL injection, authentication and authorization in systems, cross-site request forgery, social engineering attacks, and concepts in information security management. 

Your knowledge of the various web application vulnerabilities and attack methods will be enhanced after taking this course. You will get hands-on experience with many tools used in online penetration testing in cyber security.

Web Application Penetration Testing

Which type of SQL injection happens when an application is giving wrong feedback to the users from the underlying database?

Which type of SQL injection happens when an application is giving wrong feedback to the users from the underlying database?

Which flag is added to the sqlmap query to enumerate the databases and access all the database table entries?

Which flag is added to the sqlmap query to enumerate the databases and access all the database table entries?

Which method of sending data reflects the information being sent in the URL?

Which method of sending data reflects the information being sent in the URL?

**(Select all that apply.)** A database admin wants to ensure that the accounting department can only view and selectively update individual entries in a table containing financial data. Which approaches should work?

(Select all that apply.) A database admin wants to ensure that the accounting department can only view and selectively update individual entries in a table containing financial data. Which approaches should work?

`?searchProd="y"&?searchPrice="y"OR"1"="1"`

`?searchProd=y"OR"1"="1";--&?searchPrice=y`

**(Select all that apply.)** A web page containing product listings has an endpoint through which a search query can be supplied where it retrieves relevant data for display. The query used to ask for data is:

```
$query = 'SELECT * FROM products WHERE product="$searchProd" AND onSale="false" AND priceMax="$searchPrice"';
```

We want to know whether this is vulnerable to the `GET` method. Which inputs will result in a successful injection? 



(Select all that apply.) A web page containing product listings has an endpoint through which a search query can be supplied where it retrieves relevant data for display. The query used to ask for data is:
<pre><code>$query = 'SELECT * FROM products WHERE product=&quot;$searchProd&quot; AND onSale=&quot;false&quot; AND priceMax=&quot;$searchPrice&quot;';
</code></pre>
We want to know whether this is vulnerable to the <code>GET</code> method. Which inputs will result in a successful injection?

Take a short quiz on what you learned in this chapter.

Introduction to the Course

Introduction to Linux

Introduction to Python

Web and Server Technology

Network Management and Analysis

Open-Source Intelligence

Cross-Site Scripting

SQL Injection

Authentication and Authorization

Cross-Site Request Forgery

Social Engineering Attacks

Broader Security Concepts

Wrapping Up

Quiz Yourself on SQL injection