Overview What You Will Learn Curriculum Instructor

Course Overview

Sometimes, it becomes a challenge for ethical hackers to check whether they are working in a legal environment. Websites and web applications thus indicate if the ethical hacker is working in an ideal hacking environment. These applications help the ethical hacker to build confidence and get comfortable with finding vulnerabilities and discovering new vulnerabilities.  

In this course, we will learn what intentionally vulnerable applications are and why there are needed. You will learn how to exploit vulnerabilities on BWapp. This course will teach you how to perform SQL injection attacks on the CTFLearn platform and other web application attacks on OWASP Mutillidae. We will learn how to perform penetration tests on WebGoat and Google Gruyere. 

By the end of this course, you will be well versed in solving problems by using popular intentionally vulnerable apps and becoming industry-ready. If you want to see the real hacking tips and techniques on the move, then this course is for you.

What You Will Learn

  • Learn what OWASP Top 10 vulnerabilities are practically.
  • Find out how SQL Injection attacks are performed.
  • Understand Cross-site Scripting attacks including Reflected XSS, DOM XSS, and Stored XSS.
  • Learn about IDOR, XXE attack, and many more.

Program Curriculum

  • Installing bWAPP
  • Installing DVWA
  • Installing OWASP Mutillidae
  • Installing WebGoat
  • Setting up Google Gruyere
  • CTFLearn
  • $7 Million Cybersecurity Scholarship by EC-Council
  • Chapter 1 Quiz

  • Learning Objectives
  • Launching Burp-Suite
  • Using Foxy-proxy
  • Intruder
  • Repeater
  • Chapter 2 Lab
  • Chapter 2 Quiz

  • OS Injection Attack
  • SQL Injection Attack
  • Cross-site Scripting Attack
  • File Inclusion Attack
  • Cross-site Request Forgery
  • XML External Entity (XXE) Attack
  • Session Hijacking Attack
  • Brute-force Attack
  • Insecure Direct Object References (IDOR) Attack
  • Chapter 3 Quiz

  • Learning Objective
  • PHP Code Injection Attack
  • SQL Injection Attack
  • Session Hijacking
  • XML External Entity (XXE) Attack
  • Insecure Direct Object References (IDOR) Attack
  • Reflected Cross-site Scripting (XSS) Attack
  • Stored Cross-site Scripting (XSS) Attack
  • Chapter 4 Lab
  • Chapter 4 Quiz

  • Learning Objective
  • Introduction to DVWA
  • Brute-force Attack
  • Command Injection
  • SQL Injection Attack
  • Reflected Cross-site Scripting (XSS) Attack
  • Stored Cross-site Scripting (XSS) Attack
  • DOM-based Cross-site Scripting (XSS) Attack
  • Cross-site Request Forgery (CSRF) Attack
  • Chapter 5 Lab
  • Chapter 5 Quiz

  • Learning Objectives
  • OS Injection Attack
  • SQL Injection Attack
  • Reflected Cross-site Scripting (XSS) Attack
  • Discovering Hidden Directories
  • File Inclusion Attack
  • Sensitive Data Exposure
  • Chapter 6 Lab
  • Chapter 6 Quiz

  • Learning Objectives
  • Introduction to WebGoat
  • Basics of SQL Queries
  • Introduction to SQL Injection Attack
  • Launching SQL Injection Attack
  • Bypass Two-factor Authentication
  • XML External Entities (XXE) Attack
  • Cross-site Scripting Attack
  • Chapter 7 Lab
  • Chapter 7 Quiz

  • File Upload XSS Attack
  • Reflected Cross-site Scripting (XSS) Attack
  • Privilege Escalation
  • Sensitive Data Exposure
  • Chapter 8 Lab
  • Chapter 8 Quiz

  • Introduction to SQL Injection Attack
  • SQL Injection Attack
  • POST Practice
  • Chapter 9 Quiz
Load more modules

Instructor

Rajneesh Gupta

Rajneesh Gupta has 9 assertive years in information security have led him to do one thing: Build InfoSec solutions that actually work. He has worked with organizations such as HP Enterprise, Alcatel-Lucent, Reliance Communications. He is currently working as Principal Consultant at Tesseract Global and helps businesses make security possible by enabling visibility, engagement, and leadership. Diverse security leadership experience, including roles in operations, system integration, security architecture, project management, Identity, and Access management, business continuity planning, IT risk management, and information security. He has delivered multiple assignments on Cyber Security, Payments, PCI DSS, SSAE16, ISO20000, BS25999, ISO 27001, Secure Architecture Design & Solution Implementation, IT Security & Risk Management, IT Audit, Advisory & Assurance and Business Process & Controls Improvement for enterprises in United States, Singapore, India, UAE & UK.

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Choose the Pro Plan That Fits Your Learning Journey

Invest in your future with flexible Pro subscription plans. Whether you're starting your cybersecurity journey or expanding your expertise, choose the membership duration that works for you and gain access to our complete learning platform.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Ideal for continuous learning, offering extensive resources with 900+ courses and diverse Learning Paths to enhance your skills.

$ 599.00
Billed annually or $69.00 billed monthly
Get Started Now
Start your 7-day trial for $1

What is included

  • Access to 900+ Premium Short Courses
  • 70+ Structured Learning Paths
  • Validation of Completion with All Courses and Learning Paths
  • New Courses Added Every Month
Early Access Offer

Pro +

Experience immersive learning with Practice Labs and CTF Challenges for comprehensive skill-building.

$ 699.00
Billed annually or $79.00 billed monthly
Get Started Now
Start your 7-day trial for $1

Everything in Pro and

  • 600+ Practice Labs with Guided Instructions
  • 400+ CTF Challenges with Detailed Walkthroughs
  • New Practice Labs and Challenges Added Every Month

Related Courses

  • Bootstrap 4 Quick Website Bootstrap Components Course
    Short Course

    Bootstrap 4 Quick Website Bootstrap Components Course

    Software Development

    Explore the basics of Bootstrap and learn to create a website...

    $49.99

    Beginner

    1 hr 30 m

  • CCNA - Understanding Routers and Switches
    Short Course

    CCNA - Understanding Routers and Switches

    Security Architecture and Operations

    A comprehensive guide to understanding the in-depth functioni...

    $49.99

    Intermediate

    2 hr 0 m

  • The Complete Full-Stack JavaScript Course
    Short Course

    The Complete Full-Stack JavaScript Course

    Software Development

    Learn full-stack web development using JavaScript (ReactJS, N...

    $79.99

    Beginner

    24 hr 17 m

  • React.JS for Ecommerce: Building a Store with React.JS
    Short Course

    React.JS for Ecommerce: Building a Store with React.JS

    DevSecOps

    From React.js Fundamentals to Crafting an Online Storefront

    $49.99

    Advanced

    3 hr 30 m

  • CISSP Certification Domains 5, 6, 7, and 8 Video Training
    Short Course

    CISSP Certification Domains 5, 6, 7, and 8 Video Training

    Cybersecurity

    This course is ideal for individuals who desire to pass the I...

    $69.99

    Intermediate

    6 hr 30 m

  • Helm 3 - Package Manager for Kubernetes
    Short Course

    Helm 3 - Package Manager for Kubernetes

    Software Development

    A must tool for every DevOps engineer

    $49.99

    Intermediate

    1 hr 27 m

  • Learn Ethical Hacking by Hacking Real Websites Legally
    Short Course

    Learn Ethical Hacking by Hacking Real Websites Legally

    Vulnerability Assessment and Pentesting

    Fun way to learn ethical hacking by playing online hacking ga...

    $69.99

    Beginner

    4 hr 18 m

  • Mastering Ansible Playbooks: Debugging and Security
    Short Course

    Mastering Ansible Playbooks: Debugging and Security

    Software Development

    Securing and Automating Linux and Windows Systems with Advanc...

    $99.99

    Advanced

    5 hr 34 m

1 50
View all