Introduction to Web Security

عرفان باقری‌اول

• متوسط مقدماتی
• مسیر قرمز
• ۱۳ درس

دربارۀ این دوره

مخاطبان

• افراد علاقه‌مند به تست نفوذ وب
• افراد علاقه‌مند به باگ‌بانتی

پیش‌نیازها

• آشنایی با مفاهیم دورۀ +Network

• Intro to Web Applications
  • Introduction
  • Web Applications vs. Websites
  • Web Applications vs. Native Operating System Applications
  • Web Application Distribution
  • Security Risks of Web Applications (WSTG)
  • Web Application Layout
  • Web Application Infrastructure
  • Web Application Architecture
  • Front End vs. Back End
  • Encoding
• Front-end Components
  • HTML
    • HTML Frameworks
  • CSS
    • CSS Frameworks
  • JavaScript
    • Javascript Frameworks
• Back-end Components
  • Web Servers
    • Apache (Setup & Configuration)
    • NGINX
    • IIS
  • Databases
    • Relational (SQL)
    • MYSQL (Setup & Configuration)
    • MSSQL
    • Oracle
    • PostgreSQL
    • Non-relational (NoSQL)
    • MongoDB
  • Development Frameworks & APIs
    • APIs
    • Web APIs
    • SOAP
    • REST
    • GraphQL
• Web Requests
  • An overview of the HyperText Transfer Protocol (HTTP) Flow
  • An overview of the Hypertext Transfer Protocol Secure (HTTPS) Flow
  • An overview of the Domain Name Services (DNS) Flow
  • HTTP requests and responses and their headers
    • General Headers
    • Entity Headers
    • Request Headers
    • Response Headers
    • Security Headers
  • HTTP methods and response codes
    • Common HTTP methods such as GET, POST, PUT, DELETE and TRACE
  • Browser DevTools
  • Interacting with APIs
• Web Authentication & Authorization
  • Cookie-based
    • Stateful vs Stateless Cookies
  • token-based
    • JWT
    • Structure of a JWT
    • How do JWTs Work?
    • Attack
    • Allowing the None algorithm
    • Algorithm confusion
• Web Fuzzing
  • The fundamentals of web fuzzing and why it matters
  • Techniques for directory and file fuzzing
  • Methods for parameter and value fuzzing
  • Analyzing and filtering fuzzing results
  • Validating and responsibly disclosing findings
  • Understanding Web APIs and fuzzing them
• Automated testing Tools
  • Acunetix
  • Invicti
  • OpenVAS
• Manual Testing Tools
  • Burp Suite
  • OWASP Zap
  • SQLMAP
  • Nmap
  • Nuclei
  • …
• Front-end vulnerabilities
  • Sensitive Data Exposure & Prevention
  • HTML Injection & Prevention
  • Cross Site Scripting (XSS) & Prevention
    • Reflected
    • Stored
    • DOM
  • Cross-Site Request Forgery (CSRF) & Prevention
  • Cross-Origin Resource Sharing (CORS) & Prevention
  • Public CVE’s
• Back-end vulnerabilities
  • Server-side request forgery (SSRF) & Prevention
  • LFI & RFI Attack & Prevention
  • Malicious File Upload & Prevention
  • Command Injection & Prevention
  • SQL Injection & Prevention
    • Union Based
    • Blind Based
    • Bypass Security filters
  • Public CVE’s
• Projects
  • Introduction to Bash Scripting & Automation Tools
  • Damn Vulnerable Web Application (DVWA)
    • Setup & Configuration
  • Buggy Web Application (BWAPP)
    • Setup & Configuration
  • VPS Setup

گواهینامه‌ی دوره