Web Application Hacking & Penetration Testing

Ethical Hacking & Penetration Testing - Part 3

Learn to hack web applications and websites so you can secure them like security experts through the Central InfoSec CTF!

Buy $49.00

Course curriculum

1. Welcome to Your Course!
2. Connect With Us
3. Central InfoSec Cyber Security Courses
1. Your Lab Environment
2. VMware & Virtual Box
3. Vulnerable VMs for Hacking
4. Lab Setup - Metasploitable 2
1. Network Penetration Testing 201 - Exploiting Vulnerabilities Overview
2. Penetration Testing Methodology Refresher
3. Common Vulnerabilities & Findings
4. Anonymous FTP
5. Anonymous & Guest SMB Access
6. MySQL, MariaDB, PostgreSQL, & Microsoft SQL Server
7. Passwords in History Files
8. Sniffing Cleartext Passwords
9. Password Reuse
10. Brute Forcing Passwords with Nmap
11. Password Spraying O365 & OWA
12. Password Hacking
13. FTP Exploitation
14. Telnet Exploitation
15. SSH Exploitation
16. SMTP Exploitation
17. Open Mail Relays
18. MySQL Exploitation
19. RDP Exploitation
20. RDP Exploitation - BlueKeep CVE-2019-0708
21. SNMP Exploitation
22. SMB Exploitation with Nmap
23. SMB Exploitation - MS08_067
24. SMB Exploitation - EternalBlue MS17_010
25. Reverse Shells
26. Web Shells
27. File Transfers & Downloading Exploits
28. SSH Tunnels, Port Forwarding, & Pivoting
29. LLMNR, NBT-NS, & mDNS Poisoning
30. BloodHound & SharpHound
31. PlumHound BloodHound for Red, Blue, & Purple Teams
32. ADMiner Bloodhound AD Audit Tool
33. LDAPDomainDump
34. PingCastle - Active Directory Security Assessment
35. Purple Knight - Active Directory Security Assessment
36. Kerberoasting Attacks & Hacking Service Accounts
37. Attacking GPP (Group Policy Preferences) Credentials
38. Dumping Local SAM Hashes
39. Exploiting LM & Cleartext Passwords in Memory with Mimikatz
40. Dumping & Cracking Domain Cached Credentials (DCC) MSCash MSCache
41. Dumping Credentials with Mimikatz, PowerShell, Meterpreter, NetExec, & CrackMapExec
42. Password Spraying the Domain with Metasploit
43. Password Spraying the Domain with CrackMapExec & NetExec
44. Privilege Escalation
45. Maintaining Persistence
46. Pwning Systems on the Network with PsExec
47. Dumping NTDS.dit without Credentials
48. Dumping NTDS.dit with Credentials
49. Golden Ticket Attacks with Mimikatz & Metasploit
50. Key Takeaways
1. Web App & API Hacking 201 - Exploiting Vulnerabilities Overview
2. Common Web App Vulnerabilities & Pen Test Findings
3. HTTP Exploitation with Nmap
4. HTTP Header Exploitation
5. Domain & Subdomain Takeover Attacks
6. Open Redirects
7. Cross Site Scripting (XSS)
8. XML External Entity Injection (XXE)
9. Cross Site Request Forgery (CSRF)
10. Server Side Request Forgery (SSRF)
11. Server Side Template Injection (SSTI)
12. SQL Injection (SQLi)
13. Neo4j Graph Platform
14. SQLmap
15. OS Command Injection
16. Local & Remote File Inclusions (LFI & RFI)
17. File Inclusion Tips & Tricks
18. Directory Traversals
19. Unrestricted File Upload
20. Reverse Shells
21. Web Shells
22. Hard Coded Passwords
23. Verbose Error Messages
24. Profile Harvesting
25. Testing Web App & API Broken Access Controls
26. Wfuzz
27. Ffuf
28. Insecure Direct Object Reference (IDOR)
29. Username Enumeration
30. Username Harvesting with Hyrda
31. Username Harvesting with Ffuf
32. Generating Password Lists with CeWL
33. Brute Forcing Passwords & Dictionary Attacks
34. Password Spraying
35. Password Attacks with Hydra
36. Password Attacks with Ffuf
37. Wordlists for Fuzzing, Username Harvesting & Password Spraying
38. Escalating Privileges with Cookies
39. Bypassing Client Side Controls
40. Hacking Games
41. Key Takeaways
1. Metasploit 101 Overview
2. Metasploit, Armitage, & Cobalt Strike
3. Metasploit Terminology
4. Metasploit Filesystem
5. Metasploit Auxiliary & Listener Modules
6. Metasploit Exploit & Post-Exploitation Modules
7. Metasploit Payload Modules & Types of Payloads
8. Metasploit Encoder & NOP Generator Modules
9. Metasploit Database Initialization
10. Metasploit Common Commands
11. Metasploit Workspaces
12. Metasploit Database Commands
13. Metasploit Commands by Category
14. Metasploit Search Command
15. Metasploit Show Command
16. Metasploit Other Commands
17. Metasploit Meterpreter
18. Metasploit Port Scanning & Sniffing Passwords
19. Metasploit Vulnerability Scanning
20. Metasploit Importing Nessus & Nexpose Vulnerability Scans
21. Metasploit Exploitation
22. Metasploit Privilege Escalation
23. Metasploit Post Exploitation
24. Key Takeaways
1. MSFvenom 101 Overview
2. Metasploit Terminology Refresher
3. Msfvenom Introduction
4. Msfvenom Listing Modules
5. Msfvenom Listing Payloads
6. Msfvenom Listing Encoders
7. Msfvenom Listing Nops
8. Msfvenom Listing Platforms
9. Msfvenom Listing Architectures
10. Msfvenom Listing Encryption
11. Msfvenom Listing Formats
12. Msfvenom Payloads
13. Msfvenom Formats
14. Msfvenom Architectures & Platforms
15. Msfvenom Encoders
16. Msfvenom Improving Exploit Payloads & Evading Antivirus Detection
17. Msfvenom Creating Exploit Payloads
18. Metasploit Listener Refresher
19. Exploitation Demo Windows & Meterpreter
20. Exploitation Demo Linux & Netcat
21. Exploiting Apache Tomcat Manager with Metasploit Meterpreter
22. Exploiting Apache Tomcat Manager Manually with Msfvenom
23. Key Takeaways
1. Metasploit 201 Overview
2. Metasploit 201 Lab Setup
3. Common Exploitation Techniques
4. vsFTPd Backdoor
5. ProFTPD Weak Passwords
6. Apache PHP CGI RCE
7. UnrealIRCd Backdoor
8. Samba Command Injection
9. MySQL
10. Remote Execution Service
11. Rogue Shell Backdoor
12. Java RMI Server
13. DistCC Daemon Command Execution
14. Exploiting Web Apps
15. Exploiting Apache Tomcat Manager
16. Key Takeaways
1. Password Hacking & Hash Cracking 101 Overview
2. Password Security
3. Password Attacks
4. Password Spraying
5. Windows vs Unix Passwords
6. Password Attack Tools
7. Identifying Password Hashes
8. RockYou Password List
9. Basic RockYou Filtering
10. Advanced RockYou Filtering
11. RockYou String Length Filtering
12. Installing SecLists for Fuzzing & Password Attacks
13. Wordlists for Fuzzing, Username Harvesting, & Password Spraying
14. Generating Password Lists with CeWL
15. Username Harvesting with Hyrda
16. Password Attacks with Hydra
17. Wfuzz
18. Ffuf
19. Username Harvesting with Ffuf
20. Password Attacks with Ffuf
21. Hard Coded Passwords
22. Passwords in History Files
23. Sniffing Cleartext Passwords
24. Password Reuse
25. Brute Forcing Passwords with Nmap
26. Password Spraying O365 & OWA
27. LLMNR, NBT-NS, & mDNS Poisoning
28. Password Spraying the Domain with Metasploit
29. Password Spraying the Domain with CrackMapExec & NetExec
30. Attacking GPP (Group Policy Preferences) Credentials
31. Dumping Local SAM Hashes
32. Exploiting LM & Cleartext Passwords in Memory with Mimikatz
33. Dumping & Cracking Domain Cached Credentials (DCC) MSCash MSCache
34. Dumping Credentials with Mimikatz, PowerShell, Meterpreter, NetExec, & CrackMapExec
35. Dumping NTDS.dit without Credentials
36. Dumping NTDS.dit with Credentials
37. Golden Ticket Attacks with Mimikatz & Metasploit
38. Cracking Password Hashes with John
39. Cracking SSH Key Passwords
40. 7z Crack
41. Key Takeaways
1. Social Engineering & Phishing 101 Overview
2. Introduction to Social Engineering
3. Introduction to Phishing
4. Social Engineering Techniques
5. Other Social Engineering Techniques
6. Security Awareness Training
7. Recognizing Phishing Emails
8. Compliance Requirements
9. Defending Against Phishing Emails
10. Creating Phishing Campaigns
11. Domain Registration
12. Web Hosting
13. Phishing Infrastructure
14. Tips for Building Effective Phishing Infrastructure
15. Cloning Websites & Landing Pages
16. Email Server Setup
17. Crafting Phishing Emails
18. Bypassing Email Filters
19. Reporting & Metrics
20. Psychological Triggers Exploited in Social Engineering
21. Tips to Enhance Phishing Success
22. Phishing Frameworks
23. GoPhish
24. Penetration Testing & Social Engineering
25. Remote vs Physical Social Engineering
26. Physical Penetration Testing
27. Performing a Physical Pen Test
28. USB Drops
29. Tailgating
30. Mitigating Social Engineering & Phishing Risks
31. Improving Your Security
32. Key Takeaways
1. Example Attack - Phishing for Credentials & Bypassing 2FA
2. Example Phishing Email
3. Example Login Page
4. Building a Phishing Scenario
5. Creating a Spear Phishing Email
6. Creating a Login Page to Capture Passwords
7. Post-Login Exploit
8. Cloning a Website
9. Add Vishing to Your Phishing Campaign
10. Getting Creative with Phishing & Vishing Engagements
11. Advanced Phishing Techniques
12. Credential Harvesting Demo
1. Wi-Fi Hacking 101 Overview
2. Wireless Technology & Antennas
3. Wi-Fi Antennas
4. Directional Antennas
5. Semi Directional Antennas
6. Omni Directional Antennas
7. Types of Wireless Networks
8. Wardriving
9. Wi-Fi Regulations & Safety
10. Wi-Fi Hacking & Penetration Testing
11. Automated Hacking with Nmap & Wifite
12. Securing Your Wireless Network
13. DHCP vs Static IPs & MAC Addresses
14. SSID & Broadcasting Power
15. WEP vs WPA vs WPA2 TKIP vs AES
16. WEP & WPA
17. WPA2, WPA3, & Recommended Settings
18. Key Takeaways
1. Lock Picking 101 Overview
2. Introduction to Lock Picking
3. Lock Picking Laws
4. Types of Locks
5. Keyways
6. Components of a Lock
7. Parts of a Key
8. How a Lock Works
9. Theory Behind Lock Picking
10. Lock Picking Tools
11. Tension Wrenches
12. Lock Picks
13. Lock Raking Tools
14. Lock Bypassing Tools
15. Lock Decoding Tools
16. Bump Keys
17. Lock Picking Sets vs Choosing Individual Tools & Picks
18. Lock Picking Tool Brands
19. How to Pick a Lock
20. How to Rake a Lock
21. How to Bump a Lock
22. 15 Tips for Lock Picking
23. Lock Picking Demos
24. Safety Cabinet Drawer Locks
25. Bypassing Handcuffs
26. Picking Handcuffs
27. 30mm Security Padlock
28. 40mm Security Padlock
29. 50mm Security Padlock
30. Master Lock 140D
31. Master Lock 178D Combination Padlock
32. Master Lock 175D Combination Padlock
33. Brinks 161-30051 Combination Padlock
34. Speed Picking
35. 30mm Security Lock Bypass
36. 40mm Security Lock Bypass
37. 30mm & 40mm Security Lock Bypass
38. Master Lock 140D Bypass
39. Master Lock 140D Zip Tie
40. Master Lock 140D Comb
41. Brinks 161-40001 Picking
42. Brinks 161-40001 City Rake
43. Brinks 161-40001 Bogota Rake
44. 30mm Security Lock Bogota Rake
45. Brinks 161-50001 City Rake
46. Brinks 161-30051 Decoding
47. Picking 6 Pins with a Paperclip
48. Master Lock 178D Cutaway Bypass
49. Master Lock 178D Bypass
50. Master Lock 175D Bypass
51. Transparent Handcuff Picking
52. Picking Handcuffs with a Paperclip
53. Bypassing Handcuffs with a Paperclip
54. Recommended Lock Picking Tools
55. James Bond Credit Card Lock Pick Set
56. Southord MPXS-08 Lock Pick Set
57. Peterson Lock Pick Set
58. Key Takeaways
1. Altoids Tin EDC Survival Kit Overview
2. Altoids Tin EDC Introduction
3. Altoids Tin EDC Survival Kit
4. Key Takeaways
1. Mobile Application Hacking & Penetration Testing 101 Overview
2. Mobile Lab Environment
3. Download APK Files
4. Kali Linux Mobile Setup
5. Android Mobile OS Virtual Machine Download
6. Creating an Android Mobile OS Virtual Machine
7. Android Mobile OS Setup
8. OWASP Mobile Top 10
9. Vulnerable Mobile Applications
10. Mobile Testing Toolsets
11. Android Debug Bridge (adb)
12. Jad-x
13. Permissions, Activities, Broadcast Receivers, & Content Providers
14. Exploiting InsecureBankv2
15. Bypassing the Login Screen
16. Exploiting Backup Functionalities
17. Exploiting Broadcast Receivers
18. Exploiting Content Providers
19. Exploiting Keyboard Cache
20. Exploiting HTTP Logins
21. Exploiting Pasteboard
22. Exploiting Developer Backdoors
23. Exploiting Insecure Logging
24. Exploiting Weak Cryptography
25. Exploiting DIVA
26. Exploiting Insecure Logging
27. Exploiting Hardcoded Vendor Keys
28. Exploiting Insecure Data Storage (XML)
29. Exploiting Insecure Data Storage (SQL)
30. Exploiting Insecure Data Storage (Temp Files)
31. Exploiting Insecure Data Storage (SD Card)
32. Exploiting SQL Injections
33. Exploiting Local File Inclusions
34. Exploiting API Credentials
35. Bypassing API Access Controls
36. Bypassing Access Controls
37. Exploiting Hardcoded Passwords
38. Exploiting Input Validation Issues
39. Introduction to Drozer
40. Exploiting InsecureBankv2 with Drozer
41. Attacking Activities
42. Bypassing Login Screens
43. Attacking Services, Intents, & Broadcasts
44. Attacking Providers
45. Exploitation with Metasploit Meterpreter
46. Key Takeaways
1. AI & LLM Hacking 101 Overview
2. Introduction to AI & LLMs in Cybersecurity
3. AI & LLM Threats & Vulnerabilities
4. Mitigating AI & LLM Security Risks
5. AI & LLM Penetration Testing Fundamentals
6. Preparing for an AI & LLM Pen Test
7. Executing Penetration Tests on AI & LLMs
8. Ethical Hacking & Responsible Disclosure
9. AI & LLM Attack Examples
10. OWASP LLM Security Verification Standard
11. OWASP Top 10 for LLM Apps
12. Prompt Injection
13. Insecure Output Handling
14. Training Data Poisoning
15. Model Denial of Service
16. Supply Chain Vulnerabilities
17. Sensitive Information Disclosure
18. Insecure Plugin Design
19. Excessive Agency
20. Overreliance
21. Model Theft
22. AI & LLM Pen Test Checklist
23. Other Prompt Hacking Techniques & Attacks
24. AI & LLM Pen Test Tools
25. PyRIT Python Risk Identification Tool for generative AI
26. AI & LLMs for Cybersecurity
27. AI & LLM Bug Bounty Platform
28. AI & LLM CTF Challenges
29. Key Takeaways
1. Pen Test Report Writing 101 Overview
2. Introduction to Penetration Testing Reports
3. Importance & Impact of Penetration Testing Reports
4. Report Structure
5. Executive Summary
6. Testing Summary
7. Attack Summary
8. Findings & Recommendations
9. Details of Findings
10. Appendices
11. Effective Note Taking
12. Level Up Your Screenshots
13. Reviewing Reports
14. Best Practices for Pen Test Reporting
15. How to Write Effective Pen Test Reports
16. Effective Communication & Collaboration
17. Automated Pen Test Reporting Tools
18. PenTestReporting.com
19. Publicly Available Pen Test Reports
20. Key Takeaways
1. Cybersecurity Career Advice 101 Overview
2. Introduction to Cybersecurity
3. Understanding Cybersecurity Fundamentals
4. Areas of Cybersecurity
5. Cybersecurity Teams
6. Red vs Blue vs Purple
7. Cybersecurity Roles
8. Cybersecurity Career Paths
9. 5 Year Cybersecurity Career Roadmap
10. Tips for Starting a Career in Cyber Security
11. Entering the Cybersecurity Field
12. Building a Strong Foundation
13. Developing Technical Skills
14. Enhancing Soft Skills
15. Gaining Practical Experience
16. Transitioning to a Career in Cybersecurity
17. 5 Tips for Career Changers
18. Crafting a Standout Resume & Cover Letter
19. 20 Resume Tips
20. Resume Formats
21. 10 Resume Formatting Tips
22. Resume Templates
23. Job Market Trends
24. 10 Key Skills to Stand Out in the Job Market
25. Finding a Job
26. Navigating the Job Search Process
27. Job Search Websites
28. 5 Tips for Job Search Websites
29. Salary Calculator
30. 10 Interviewing Tips
31. Non-Technical Interview Questions
32. Technical Interview Questions
33. 10 Tips for Negotiating Your Cybersecurity Job Offer
34. Securing Your First Cybersecurity Job
35. 10 Essential Cybersecurity Skills
36. Advancing Your Career
37. Cybersecurity Trends
38. How to Improve Your Cybersecurity Skills
39. Building a Professional LinkedIn Profile
40. 15 Tips for Your LinkedIn Profile
41. Networking on LinkedIn
42. Conclusion & Next Steps
43. Key Takeaways
1. Closing Remarks

About this course

$49.00
465 lessons
13 hours of video content

Other Hacking Courses

We recommend this hacking course just for you

Ethical Hacking & Penetration Testing - Part 2
Course
Learn to hack computer systems and networks so you can secure them like security experts through the Central InfoSec CTF!

$49

Purchase

Other Hacking Courses

Central InfoSec

Ethical Hacking & Penetration Testing - Part 3

Course curriculum

Welcome to Your Course!

Lab Setup

Network Penetration Testing 201 - Exploiting Vulnerabilities

Web App & API Hacking 201 - Exploiting Vulnerabilities

Metasploit 101

MSFvenom 101 - Creating Exploit Payloads with Metasploit MSFvenom

Metasploit 201 - Hacking Metasploitable 2

Password Hacking & Hash Cracking 101

Social Engineering & Phishing 101 - Hacking Humans

Example Attack - Phishing for Credentials & Bypassing 2FA

Wi-Fi Hacking 101

Lock Picking 101

Altoids Tin EDC Survival Kit 101

Mobile Application Hacking & Penetration Testing 101

AI & LLM Hacking & Penetration Testing 101

Pen Test Report Writing 101

Cybersecurity Career Advice 101

Course Conclusion

About this course

Other Hacking Courses

Ethical Hacking & Penetration Testing - Part 2