Learn Bug Bounty Hunting & Web Security Testing From Scratch

Learn Bug Bounty Hunting & Web Security Testing From Scratch
Duration: 10h 59m | .MP4 1280×720, 30 fps(r) | AAC, 44100 Hz, 2ch | 7.89 GB

Learn how to discover bugs / vulnerabilities like experts | OWASP top 10 + more | No prior knowledge required

What you’ll learn:
95+ videos to teach you bug hunting & security testing from scratch.
80+ hands-on real-life examples – from simple to advanced.
Discover the most common web application bugs and vulnerabilities.
Discover bugs from the OWASP top 10 most common security threats.
Bypass filters & security on all of the covered bugs & vulnerabilities.
2 Hour LIVE bug hunt / pentest on a real web application at the end of the course.
My approach to bug hunting and web application penetration testing.
The bug hunter / hacker mentality.
Efficiency use Burp Suite to discover bugs and vulnerabilities.
Discover sensitive & hidden information, paths, files, endpoints and subdomains
Gather information about websites & applications
Essential topics to bounty hunting.
HTTP methods & status codes.
Cookies & cookie manipulation
HTML basics for bug hunting.
XML basics for bug hunting.
Javascript basics for bug hunting.
Read & analyse headers, requests and responses
Discover information disclosure vulnerabilities.
Discover broken access control vulnerabiltiies.
Discover path / directory traversal vulnerabilities.
Discover CSRF vulnerabilities.
Discover IDOR vulnerabilities
Discover OAUTH 2.0 vulnerabilities
Discover Injection vulnerabilities.
Discover Command Injection vulnerabilities
Discover HTML Injection vulnerabilities
Discover XSS vulnerabilities (Reflected, Stored & DOM).
Advanced XSS discovery & bypass techniques
Discover SQL Injection vulnerabilities.
Discover Blind SQL Injection vulnerabilities.
Discover Time-based blind SQL Injection vulnerabilities.
Discover SSRF vulnerabilities.
Discover blind SSRF vulnerabilities.
Discover XXE vulnerabilities.
The Burp Suite Proxy.
The Burp Suite Repeater.
The Burp Suite Filter
The Burp Suite Intruder.
The Burp Suite Collaborator.

Requirements:
Basic IT Skills
No prior knowledge required in bug hunting, hacking or programming.
Computer with a minimum of 4GB ram/memory.
Operating System: Windows / Apple Mac OS / Linux.
Description:
The course is divided into a number of sections, each aims to teach you a common security bug or vulnerability from the OWASP top 10 most common security threats. Each section takes you through a number of hands-on examples to teach you the cause of the security bug or vulnerability and how to discover it in a number of scenarios, from simple to advanced. You’ll also learn advanced techniques to bypass filters and security measures. As we do this I will also introduce you to different hacking and security concepts, tools and techniques. Everything will be taught through examples and hands-on practicals, there will be no useless or boring lectures!

As mentioned you’ll learn much more than just how to discover security bugs in this course, but here’s a list of the main security bugs and vulnerabilities that will be covered in the course:

Information Disclosure.
IDOR (Insecure Direct Object Reference).
Broken Access Control.
Directory / Path Traversal.
Cookie Manipulation.
CSRF (Client-Side Request Forgery).
OAUTH 2.0.
Injection Vulnerabilities.
Command Injection.
Blind Command Injection.
HTML Injection.
XSS (Cross-Site Scripting).
Reflected, Stored & DOM Based XSS.
Bypassing Security Filters.
Bypassing CSP (Content Security Policy).
SQL Injection.
Blind SQLi.
Time-based Blind SQLi.
SSRRF (Server-Side Request Forgery).
Blind SSRF.
XXE (XML External Entity) Injection.

Topics:
Information gathering.
End point discovery.
HTTP Headers.
HTTP status codes.
HTTP methods.
Input parameters.
Cookies.
HTML basics for bug hunting.
Javascript basics for bug hunting.
XML basics for bug hunting.
Filtering methods.
Bypassing blacklists & whitelists.
Bug hunting and research.
Hidden paths discovery.
Code analyses.

You’ll use the following tools to achieve the above:
Ferox Buster.
WSL.
Dev tools.
Burp Suite:
Basics.
Burp Proxy.
Intruder (Simple & Cluster-bomb).
Repeater.
Collaborator.

With this course you’ll get 24/7 support, so if you have any questions you can post them in the Q&A section and we’ll respond to you within 15 hours.

Checkout the curriculum and the course teaser for more info

Who this course is for:
Anybody looking to become a bug bounty hunter.
Anybody interested in web application hacking / penetration testing.
Anybody interested in learning how to secure websites & web applications from hackers.
Web developers so they can create secure web application & secure their existing ones.
Web admins so they can secure their websites.

More Info

Please check out others courses in your favourite language and bookmark them
– – – –