Mastering Command Injection – The Ultimate Hands-On Course
Published 9/2023
MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz
How to Find, Exploit and Defend Against Command Injection Vulnerabilities. For Ethical Hackers, Developers & Pentesters
What you’ll learn
Learn how to find command injection vulnerabilities from a black box and white box perspective.
Gain hands-on experience exploiting command injection vulnerabilities using Burp Suite Community and Professional editions.
Learn secure coding practices to prevent and mitigate command injection vulnerabilities.
Learn how to exploit command injection vulnerabilities of varying difficulty levels.
Learn how to automate attacks in Python.
Requirements
Basic knowledge of web fundamentals (HTTP requests, methods, cookies, status codes, etc.).
Latest version of Kali Linux VM (free download).
PortSwigger Web Security Academy account to access the labs (free registration).
Description
Overview
Section 1: Introduction
Lecture 1 Course Introduction
Section 2: Getting help
Lecture 2 Answering your questions
Lecture 3 Udemy tips and tricks
Section 3: Command Injection – Technical Deep Dive
Lecture 4 Agenda
Lecture 5 What Is Command Injection?
Lecture 6 How Do You Find Command Injection Vulnerabilities?
Lecture 7 How Do You Exploit Command Injection Vulnerabilities?
Lecture 8 How Do You Defend Against Command Injection Vulnerabilities?
Lecture 9 Resources
Section 4: Lab Environment Setup
Lecture 10 Lab Environment Setup
Section 5: Hands-On Command Injection Labs
Lecture 11 Lab #1 OS command injection, simple case
Lecture 12 Lab #2 Blind OS command injection with time delays
Lecture 13 Lab #3 Blind OS command injection with output redirection
Lecture 14 Lab #4 Blind OS command injection with out-of-band interaction
Lecture 15 Lab #5 Blind OS command injection with out-of-band data exfiltration
Section 6: Bonus Lecture
Lecture 16 Bonus Lecture
Penetration testers that want to understand how to find and exploit command injection vulnerabilities.,Software developers that want to understand how to defend against command injection vulnerabilities.,Bug bounty hunters that want to understand how to find and exploit command injection vulnerabilities.,Individuals preparing for the Burp Suite Certified Practitioner (BSCP) exam.,Individuals preparing for the OSWE certification.
